Instrumenting a GraphQL API unlocks superpowers for API developers so they are more confident when evolving their API over time.

This post is the first part of a series of best practices and observations we have made while building GraphQL APIs at PayPal. In upcoming posts, we’ll share our thoughts on: schema design, error handling, production visibility, optimizing client-side integrations and tooling for teams. You might have seen our previous…

At PayPal, we recently introduced GraphQL to our technology stack. If you haven’t heard of GraphQL, it’s a wildly popular alternative to REST APIs that is currently taking the developer world by storm! At PayPal, GraphQL has been a complete game changer to the way we think about data, fetch…

Hey there! You might have stumbled upon this post because you’re interested in securing your JS apps, or maybe you’ve heard about the other things we have open sourced. Today we’re releasing jwt-csrf, a stateless CSRF solution for securing your JavaScript apps! It’s something we’ve built and battle tested over…

Hey there! You might have stumbled upon this post because you’re interested in securing your JS apps, or maybe you’ve heard about the other things we have open sourced. Today we’re releasing jwt-csrf, a stateless CSRF solution for securing your JavaScript apps! krakenjs/jwt-csrf jwt-csrf - Stateless CSRF protection using jsonwebtoken (JWT)github.com It’s something we’ve built and battle tested over…