Co-founder of @qupaya. Founder & organizer of @ngdeconf & @FrankenJS. 🏈 🥾 🥩 🍺
The Internet
Joined August 2013
- Tweets3.7K
- Following719
- Followers745
- Likes23K
Peter Müller retweeted
What is the Semantic Gap?
It happens when two systems interpret the same HTTP message differently.
It can start as interoperability trouble, but also become security-relevant.
thymian.dev/introduction/htt…
That's a blast 🙌 The #HTTP QUERY method landed as a proposed standard in RFC 10008
Ever used POST for a read-only search because the query was too big for the URL?
New RFC 10008, just released, defines HTTP QUERY: request content with safe/idempotent semantics.
rfc-editor.org/info/rfc10008
Peter Müller retweeted
Back to basics: Why HTTP idempotency matters.
DELETE timed out. Retry or not?
If DELETE is implemented correctly, retrying it keeps the intended effect the same: the resource is gone.
Use HTTP semantics.
thymian.dev/introduction/htt…
Peter Müller retweeted
Your API's 403 is leaking information.
It tells attackers the resource exists.
RFC 9110 says you can return 404 instead — by design, not as a hack.
thymian.dev/introduction/htt…
Did you know you can soup up the thymian analyze command by validating your recorded traffic directly against your API specification?
🌱 thymian analyze --spec openapi:./openapi.yaml --traffic har:./traffic.har
📚 thymian.dev/tutorials/thymia…
#APIDevelopment #OpenAPI #http #api
Validate recorded HTTP traffic against conformance rules.
npx thymian analyze --traffic har:./traffic.har
Works with HAR files from browsers, API clients, or proxies. Finds issues introduced by gateways, caches, and middleware.
thymian.dev/tutorials/thymia…
The powerhouse under the hood is the built-in Thymian sampler. @matthyjk wrote a magnificent tutorial about how to generate and set up sample data and hooks (e.g., for authentication or data seeding).
🌱 thymian.dev/tutorials/sample…
#http #api #testing #contracttesting
Does your running API actually behave correctly?
npx thymian test --spec openapi:openapi.yaml --target-url http://localhost:3000
Sends real requests, validates responses against HTTP rules. Catches implementation drift.
thymian.dev/tutorials/thymia…
Peter Müller retweeted
v1.0 is out now! 🙌
It took more than a decade, TypeORM was considered dead by many over the past years...
But since late 2024 a group of dedicated maintainers was working hard and finally shipped what so many developers were waiting for: the first officially stable version!
Finally, there is a way to cover #HTTP semantics for your #OpenAPI spec. Linting is just the first step to avoid API drift between specification, development, integration and production. #API
Catch missing headers, wrong status codes, and spec issues before deployment.
npx thymian lint --spec openapi:openapi.yaml
No running server needed.
thymian.dev/tutorials/thymia…
Peter Müller retweeted
Catch missing headers, wrong status codes, and spec issues before deployment.
npx thymian lint --spec openapi:openapi.yaml
No running server needed.
thymian.dev/tutorials/thymia…
🌱 We built a new OSS tool for API & HTTP conformance testing. Zero AI slop. Just science-backed engineering designed for AI-integrated workflows. Ship #RFC9110 standards to your API!
🌱 github.com/thymianofficial/t…
Follow @thymiandev! 🌱
Peter Müller retweeted
Day 2 at #ngde2025! We hope you're enjoying the great talks as much as we are. 🚀
Use the time between sessions and swing by our booth! There's still swag up for grabs. 💻
Imagine a program that combines guidance, mentoring, consulting, engineering, and managed services, right when you need it. We'll #LevelUp your #Angular development workflow with the #GuidedAngular program.
Your #Angular team doesn't need a spellbook; they need a guide. 🧙♂️ Our #GuidedAngular program provides an expert guide to work with your team in paired sessions and dedicated #LevelUp workshops to sharpen their skills. Get the hands-on guidance you need: qupaya.com
It's 2025, and SSR can still be a wild ride in zone.js-based #Angular applications. My colleague @SaninnSalas shares insightful experiences on how to tackle hydration tasks. Let's fight NG0506! qupaya.com/de/blog/resolving…
