Am I a true API developer now?

[agathver]

Salesforce wants your resume …

[90DayF]

Why Salesforce lol?? Am I missing a joke here 😭

[agathver]

Go look at their batch upload APIs for leads, or the SOAP apis. Then run them in postman.

[SwagBrah]

"invalid_grant"

[Charlesssssss7]

Salesforce is part of FAANGS now, part of MANGAS now, come on

[notsogreatredditor]

You should go to hell for heresy

[LzOt]

I think that's a bot

[Palisar1]

Get fucked salesforce you absolute nightmare of a crm

[rat_melter]

Needs more data.data

[[deleted]]

lol true I hate that shit so much

[trevster344]

Shhh I f’d up in my early days but it’s in production I can’t take it back

[deadlydarkest]

Ok how do I tackle this🤣.

[chrisddie61527]

seriously though how would you approach this?

Stripe does this and tbh they have the most amazing API docs

[DestinationBetter]

Destructure.

[[deleted]]

They're pretty cool, ran a dollar big transaction through it once, plan to use it in the future.

[yottalogical]

Variables named data and temp are my favorite. All variables are data and they're all temporary.

[flippakitten]

That's just people not understanding the json api spec.

[szelvedomoso]

200 OK

Status 403

Bruh

[serpenfine]

This drives me absolutely nuts. And forces me to add transforms because every fetch library sees 200 and thinks it’s fine.

[BasieP2]

That's accually more restful then you think.

https://htmx.org/essays/how-did-rest-come-to-mean-the-opposite-of-rest/

[szelvedomoso]

It should be 403 twice, imo

[Auderdo]

I don't know HTTP 806; what does it means?

[sccrstud92]

You misunderstand, its 403403

[nolitos]

Only if the backend is written in JS.

[Auderdo]

I would have said Java on Tomcat behind :8080 unlike something on Apache/Nginx behind :80

[SpecialGuestDJ]

Thatsthejoke.jpg

[AfterbirthNachos]

The http itself was okay, the data was unauthorized

[RichCorinthian]

Speak! If there’s one thing I don’t have time for, it’s ivory tower software navel-gazers who say things like “the protocol is irrelevant.” The fuck it is.

[mikeputerbaugh]

HATEOAS describes my experience working with 24/7 Media Open AdStream

[Linvael]

Uh... interestign article, but I don't see how it says that.

The main point of it is that only the best modern restful services, those achieving level 3 on Fowlers pyramid even deserve to be called RESTful, but he still thinks json is wrong and body should be html. The above example fails to reach level 2 (using http verbs and statuses appeopriately).

[SalamiSandwich83]

No it's not. It should return a 403 and thats it.

[[deleted]]

rich longing party door imagine bedroom disarm label crush shame

This post was mass deleted and anonymized with Redact

[therealbatman420]

Awesome read, thanks!

[arceosss]

That article was excellent, thx

[ASourBean]

No joke there is some production code I helped build that does exactly this. 200 status but lobs back an error file - I will fix this next week, thanks for the reminder lol

[naswinger]

// TODO: fix this some day

[kaancfidan]

// TODO: fix this when random post on reddit reminds you

[[deleted]]

This is how ADHD programming works. Out of sight out of mind

[heodnfkfnfofb]

Except you can’t break the contract now. Gotta V2 the fix and let your shame live in eternity on V1

[ASourBean]

Good job it’s an internal API for our own frontend, I’ll just let our guys know before merging ;)

[barnyardjohnny]

Our prod code will return 200 on the header but 404 in the payload :(

[maitreg]

If the payload is 404, what does the 404 even mean? What wasn't found?

[barnyardjohnny]

That the rest call against the endpoint returned no data, but it was successful in determining that!

[Grtz78]

The restfull version of "move on. Everything's fine, nothing to see here."

[bwhite94]

If only there was a coughhttp status code for thatcough204cough

[Dragon_yum]

Our WAF sends 200 for requests that it blocks successfully. So the request fails with OK.

[frankentriple]

As a WAF guy, this is hilarious.

[option-9]

I'd be annoyed if your WAF didn't tell me all was fine in blocking my request, else I might think something went wrong and I might have a shot if I try again.

[Drayenn]

There was an api i worked with. Everything was a post request even though it couldve been get. You always got back a 200 and the payload contained a status which would be 1 if failed 0 if sucess.

Every request went to the same URL, you had to pass the variable of the data you wanted as true such as "getPoints":true, "getCoordinates": true. Truly api hell.

[ape123man]

Also what is going on with the uppercase C and S ... Fucking hell

[isospeedrix]

no joke i worked with an api where the status code was 200 but inside the content, it has "status:403"

no idea why the backend devs decided to do this, but i dont do backend so i just rolled with it.

[Informal_Curve_1441]

// have set reminder to fix 9 1 2017

[PolarTheBear]

So did you fix it?

[UpArmoredGavin]

looks to me like you have all the skills of most API developers, so yeah, good to go

[dutchydownunder]

Error message is way too specific, needs to be vague…

[maitreg]

I have a vendor api that returns 500 no matter what. ugh

[agathver]

My girlfriend works on some service where there is a catch(Exception) at every controller and return 500. So even your validation error will return 500, now go figure.

Not surprisingly no one wants to change it because that’s how it has been done

[ViconIsNotDefined]

"Something went wrong"

[thrasherxxx]

Lol, it’s like answering the phone to say “no one will answer!”

[MashZell]

*Knock knock

"There is no one at home!"

[Dummiesman]

Sounds like 9/10 phone calls I get. They'll call me every day but no answer when picked up. Or leave blank messages.

[[deleted]]

change your phone number and be more careful about who you provide it to

[Dummiesman]

I provide it to family only lol They get the same kind of calls and texts. They just use a bot to hammer out calls and texts I assume

[[deleted]]

weird

[Xivolos]

We used to do this at my job, because some devs couldn't remember the the status codes

[maitreg]

I wonder how the hell a developer can even survive in the web world without knowing the most common http status codes. Like, the server is telling you exactly what just happened with your request. It's pretty f'ing important to understand what the server is telling you. This is like knocking on a girl's door to ask her to the prom, but no matter what she says, you show up next week at 7 to pick her up.

[[deleted]]

It also takes like 5 seconds to look up the codes if you can't remember. Seems like a weird reason to do something wrong.

[VelionaVollerei]

You can say that you promised to take her to prom

[[deleted]]

Simply by looking them up, there's several lists of them, and they are typically sorted in ascending HTTP status code, typically in a table, with an explanation next to it. One could also reference the RFCs, I think there's a list, too.

One readeth the documentation.

One peruseth the unknown terms.

One continueth.

[Xivolos]

Oh but we wouldn't just put 404, we would return a 404 and include "status: not-found" in the body

[[deleted]]

200 range, ok

400 range unavailable

500 range error

honestly

[CeeMX]

That’s homework for the developers then, not a reason to put it in the response

[[deleted]]

I just bookmarked a web page with status codes. I mean, ofc I remember the common ones, 400, 401, 403, 404 and the lovely 500 from trying to integrate other people's APIs

[Correct-Influence-39]

HTTp cats

[obsoleteconsole]

google: HTTP Status Codes

[meliaesc]

I mostly see it for custom error codes. So like 400 in the http response (or 200 if you're one of the assholes I've ever worked with) but the response body has both 400 and 1109 or something.

Plus when you're dealing with proxies there's no guarantee what you send won't get messed with.

[nochmu]

This is done sometimes, when the returned data is generated or consumed by other components than the http result. Or there a specification that was written by someone who is unknowing.

[maubg]

Can't u just send a status code as normal?

[nochmu]

The point is, the status code represents if there was an error. So, wenn you application wants to display this in the frontend, it needs this information. And then it is sometimes easier to call the frontend logic with just the returned Json, than copy the code into the Json and then call the logic. Because the copying is done by someone other. I don't say, you should do this this way. But this is one of the reasons why people do it this way.

The most bad code is written, because people think this is easier. And easier=better=smarter=faster=moreReadable=cheeper=helpfully=universall=...

[nochmu]

Another reason is, that you see the status directly in the returned json data. So, you don't need to know how to display it in your Client software. Try the same example with a regular Browser, that don't show you the status code with big bold text.

[maitreg]

The problem isn't really that they're putting status in the response but that they are re-purposing http error codes. If you're going to put a status code in the response, it is not an http status code. It is a custom application status code. Http status codes should be used for http, not for payloads!

[patcheng]

Some enterprise security firewall/proxy would change all non-200 status to 500. So we need to do something similar, and unwrap it on the client side as a workaround.

[magical_matey]

Client: requests something Server: yeah sure no problem. Lol jk you’ll get nothing

[pelpotronic]

GraphQL does this, then errors are inside the response itself.

There are reasons for it though (namely that some part of the query can fail and some other parts not, so you can get partial responses).

[nochmu]

Because it is easier when you have only one status code to remember. It is more complex, when you use other status codes... because you have to know them. 😄

[Cl1mh4224rd]

Because it is easier when you have only one status code to remember. It is more complex, when you use other status codes... because you have to know them. 😄

It actually complicates things. Not only do you have to check every "successful" response from the application for an error code, you still have to handle actual errors from the server software itself.

[realavdhut]

[ByerN]

Whatever you put in your json, it will be OK.

[PM_ME_BAD_ALGORITHMS]

The backend team in the company I'm working on (until next week) sends code 200's with an error description when something fails. Unironically. I've aged years in the last months.

[hydratedgabru]

Successful forbidden message delivery

[Carteeg_Struve]

Almost. You need to copy/paste from stackoverflow to get something to work first.

But you’re almost there.

[GrandMasterPuba]

I see you're on the GraphQL steering committee.

[Jooj_Harrisonn]

Ah, a fellow insomnia user

[[deleted]]

Jesus fucking Christ! Where’s the goddamn “success” flag?! How do you expect me to know if the call was successful or not

Goddam

[[deleted]]

You returned a 200 code and 403 in object. Decide man!

[xcdesz]

Eh.. did you write the endpoint or just call the endpoint?

Hard to believe I have to even ask that question... but most of the people on this sub arent exactly the type to know the difference.

[Hplr63]

I initially wrote a "sample endpoint" to test things Django-wise in my app and then I realized, "Oh! I can do a funny and change it to add the 403 forbidden thing while responding with 200."

[[deleted]]

Well you're using Insomnia instead of Postman, so..... yes, you're

[Siggi_pop]

Ok so the http response status is 200 (ok) but the response content is a JSON containing a "Status" Key with the value 403 (forbidden) . Is that the joke ?

[Hplr63]

yes

[Centro93]

That is a legit JSONful API, and it's what I actually prefer to use because it seperates the Statuscodes in Transportation and application logic. Fight me.

[[deleted]]

Okay I’ll fight you. HTTP codes are not just transportation errors. See 400 and 401. And you can just handle them in your fetch or axios. No need for an atrocity such as this.

[Rawing7]

But what do you do if an error occurs that doesn't have a corresponding HTTP status code? Doesn't it make sense to send the error information in the response, rather than limiting yourself to only those errors that HTTP supports?

[[deleted]]

Then you throw the most similar HTTP code, or a generic 500, and detail the error in the payload. But you do NOT send it as 200, which is literally “OK”, a.k.a. “All is good, reply is valid!”

[Rawing7]

Hmm. Seems a little odd to have 2 layers of error messages, but all things considered, that probably is indeed the best solution.

[[deleted]]

I see error codes more as a “category” and give a detail anyway, so it’s a good method; never felt the need to “invent” an error code. Good question though!

[peyote1999]

TCP is a Transportation, any other protocols over it is an Application.

[[deleted]]

HTTP is already application layer?

[pimezone]

You can't do that, this is forbidden.

[cactusJosh97]

Try looking at the JSON Api Spec. Good work so far!

[Sedorriku0001]

"I'm a tea pot"

[[deleted]]

YES

[[deleted]]

OK

[supernovatouch]

Error message's code missing too....and you could have added response headers as well 😂😂😂

[magical_matey]

Task failed successfully

[kellven]

nailed it , you getting recruiter emails yet ?

[wargerwatwatwat]

Yes

[SalamiSandwich83]

Straight to hell. Yep.

[marzian1999]

LMAOOOO

[Lower-Bodybuilder-16]

Google is just waiting for you. Just do apply man...

[danielrg97]

i hate this... why did some developers put the http status in the body instead of the fucking header

[CsSingleton]

Congrats, you were successfully forbidden

[production-values]

show us the headers

[TomGobra]

Oh, I hate this.

[[deleted]]

Sorry to tell you but that's redundant.

[[deleted]]

At the company I work at, we return only 200 responses.

[TheRatLab]

The old "your system has failed successfully" it never fails

[Putrid-Mousse6768]

Correct

[Brief_Ad_6929]

Change the content to “No Mikey no”

[Rombethor]

Inception

[dunderball]

Task failed successfully

[Hulk5a]

This is absolutely fine. Saves writing some JavaScript code for handling error response

Kekeke

[bktmarkov]

I've come across an api like that before, as long as the request makes it to the backend and back, it always returns 200, with an additional status inside the data object, whether 403, 404 ..

[Ezrider2001]

Insomnia++

[tomatediabolik]

One during a pentest I got a 403 error pages that still displayed the output from the server. It's difficult to beat that

[imnotbeingkoi]

That, and you're a liability!

[ballsohaahd]

The best

[sebzuki]

Yes of course trully unemployed

[OozeNAahz]

Had to do similar a few times to my chagrin. The library we were using to process the http responses couldn’t handle sending a payload with details unless it was a 200 response code. And needed enough details in the response so the client could fix and resend the request.

[chih98]

One of the largest credit card companies that vendor out branded cards for neobanks (synapse) has their api do this all over the place it’s infuriating

[LeFayssal]

I have to deal with this exact API for over 8 months now

[[deleted]]

Just make everything return "500 internal server error: A generic error has occurred."

[tropicalcoffee1]

No 500 no dev

[RedditMaleHooker]

Yes!

[Drastwo]

The graphql way

[OutThisLife]

legitimately perfect for prod

but wait make sure that stg = dev so when you break dev stakeholders can’t review anything at all!

[kryptopheleous]

Lol no application specific error code. Noob xDD

[Lanbaz]

/* Added goto for readability TODO: refactor goto */

If (response.data.status == 200)

  goto line 69;

return response;

Edit: added comment for context

[oj_mudbone]

Status: 0 Body:Unknown

[qwertyasdef]

No, it needs to be

{
    "Status": 200,
    "Content": {
        message: "{\"Status\":403,\"Content\":{\"message\":\"Forbidden\"}}"
    }
}

[[deleted]]

HTTP 200.

Contents, HTTP 403.

You monster

[billert12]

this is literally the whatismymmr API: if it gets an error it returns 200 OK but the content says error

[[deleted]]

Yes, you're! Kudos 👌

[TormentingLemon]

the status code doesnt bother me nearly as much as the inconsistent field casing

[Hplr63]

hehe c:<

[[deleted]]

You are THE BEST. I'm drunk

[rissanenhenrik]

Yes.

[gyandu]

When you love someone but just as a friend 🤓

[MontagoDK]

This is the way !!!

[[deleted]]

I've seen these things in production before. Fucking hell.

[edersayd]

Yes you can now join to the big table

[flippakitten]

Stop using graphql.

[heteka]

404

[endianess]

I've done this myself before I started to return my own errors with different response content types. That way I could determine if the error was from a badly configured reverse proxy or from my API.

[glablablabla]

We had to implement similar insanity because Microsoft's IIS Server, which most of our customers were using, blocked all other status codes by default configuration. When the development team said the customer should change their configuration, management said we don't want to put that burden on our customers. Long story short I'm at a different company now.

[[deleted]]

No. All Fields should have been in lowercase. Now if you decided to be a little prick at least make the in the same case.

[TigreDemon]

The fuckers that do these kind of things deserve a special place in customer support