https://sergiodxa.com/glossaryGlossary by Sergio Xalambrí.https://sergiodxa.com/glossary#restfulA term used to describe APIs that follow the principles of REST, using standard HTTP methods, stateless communication, and resource-based URLs to provide predictable and consistent API design.fd5f0e2c-e94b-47de-8b7c-511aa6c61da5Sun, 08 Mar 2026 22:50:08 GMThttps://sergiodxa.com/glossary#mime-typeA standardized identifier used by HTTP to describe the format of a file or response, such as text/html, application/json, or image/png.20c418f5-0f35-4719-affa-9b874d94eb27Sun, 08 Mar 2026 22:48:38 GMThttps://sergiodxa.com/glossary#same-origin-policyA browser security rule that restricts scripts from interacting with resources from a different origin unless explicitly allowed through mechanisms such as CORS.9adc7281-5aab-4dff-8f62-5828cdda7c51Sun, 08 Mar 2026 22:47:23 GMThttps://sergiodxa.com/glossary#corsA browser security mechanism that controls whether a web page can request resources from a different origin than the one that served the page.93fcf346-e021-4637-9820-3c97bdd706d7Sun, 08 Mar 2026 22:46:01 GMThttps://sergiodxa.com/glossary#bearer-tokenA type of access token used in HTTP authentication where possession of the token grants access to protected resources, commonly sent in the Authorization header.06c53c9f-88c9-4bc2-814e-80058c80a891Sun, 08 Mar 2026 22:45:23 GMThttps://sergiodxa.com/glossary#oidcAn identity layer built on top of OAuth2 that allows applications to authenticate users and obtain identity information through standardized tokens such as ID Tokens.bd141ef0-e814-4779-8378-2f52eed8df40Sun, 08 Mar 2026 22:44:33 GMThttps://sergiodxa.com/glossary#oauth2An authorization framework that allows applications to obtain limited access to user resources on another service without requiring the user to share their credentials.cc47493a-69ee-49ce-b41f-b3815f8d6387Sun, 08 Mar 2026 22:43:34 GMThttps://sergiodxa.com/glossary#graphqlA query language and runtime for APIs that allows clients to request exactly the data they need from a server rather than receiving fixed responses from predefined endpoints.aeaeb74e-63d9-4dba-b3f2-bd6458ff8ae8Sun, 08 Mar 2026 22:42:56 GMThttps://sergiodxa.com/glossary#restAn architectural style for building Web APIs where resources are accessed through standard HTTP methods such as GET, POST, PUT, PATCH, and DELETE.112be8e2-1047-4d45-b04a-10ee690ece98Sun, 08 Mar 2026 22:42:24 GMThttps://sergiodxa.com/glossary#xmlA markup language used to represent structured data in a hierarchical format, historically common in web services before JSON became dominant.bf869e4b-62ac-4e5d-b3d7-444d657f6785Sun, 08 Mar 2026 22:41:46 GMThttps://sergiodxa.com/glossary#jsonA lightweight data format commonly used in APIs to exchange structured data between clients and servers in a format that is easy for humans to read and machines to parse.b8cdbc2f-c121-4dc4-8e44-8a5252cf75b2Sun, 08 Mar 2026 22:41:06 GMThttps://sergiodxa.com/glossary#tlsA cryptographic protocol used to secure communications over a network, commonly used by HTTPS and WSS to encrypt data between clients and servers.bb654e8d-7838-4489-875b-e8a24840f410Sun, 08 Mar 2026 22:40:21 GMThttps://sergiodxa.com/glossary#tcpA core internet protocol that ensures reliable, ordered delivery of data between devices communicating over a network.e923824a-f85a-4542-838b-2c535b8cb7ebSun, 08 Mar 2026 22:39:35 GMThttps://sergiodxa.com/glossary#ipThe protocol responsible for addressing and routing packets across networks so data can travel from a source device to a destination device.56fad0f2-3335-4efd-8b34-5c891a52286cSun, 08 Mar 2026 22:39:01 GMThttps://sergiodxa.com/glossary#uriA broader identifier used to identify a resource, which may include URLs or other naming schemes that reference resources without specifying their location.e743f22f-377a-4810-a5e8-b4e6e827374eSun, 08 Mar 2026 22:38:28 GMThttps://sergiodxa.com/glossary#urlA standardized address used to locate resources on the web, specifying the protocol, domain, path, and optionally query parameters or fragments.d9382834-c02d-4fdd-a184-5e8087bbf349Sun, 08 Mar 2026 22:37:47 GMThttps://sergiodxa.com/glossary#dnsA distributed system that translates human-readable domain names into IP addresses so browsers can locate servers on the internet.025e5c3c-6d5f-4138-9141-df66bc6b3963Sun, 08 Mar 2026 22:37:01 GMThttps://sergiodxa.com/glossary#ftpA network protocol used to transfer files between a client and a server, historically common for uploading website files to hosting servers.2c52c55e-78cd-4645-aa07-3f27448dfb77Sun, 08 Mar 2026 22:36:20 GMThttps://sergiodxa.com/glossary#cssA stylesheet language used to control the presentation of HTML documents, including layout, colors, typography, spacing, and responsive design.783c3b98-e39f-4c4f-b804-46568d7f0428Sun, 08 Mar 2026 22:35:43 GMThttps://sergiodxa.com/glossary#htmlThe standard markup language used to structure content on the web, defining elements such as headings, paragraphs, links, images, and other page structure.b5875f61-61f9-46e8-8bd1-69f23f0d4b94Sun, 08 Mar 2026 22:35:07 GMThttps://sergiodxa.com/glossary#httpsA secure version of HTTP that encrypts communication between a client and server using TLS, protecting data from interception or modification during transmission.099a30e4-96e5-401c-83ef-9de27921a6c8Sun, 08 Mar 2026 22:34:29 GMThttps://sergiodxa.com/glossary#httpThe application-layer protocol used for communication between web browsers and servers, defining how requests and responses are formatted and transmitted across the web.98a21ab0-520d-40ad-9411-014d97cb90e3Sun, 08 Mar 2026 22:33:47 GMThttps://sergiodxa.com/glossary#wssThe encrypted version of the WebSocket protocol, using TLS to provide secure real-time communication between a client and a server over the internet.79fc507c-361d-41ce-a9a3-82796201b9c7Sun, 08 Mar 2026 22:31:33 GMThttps://sergiodxa.com/glossary#web-apiAn API exposed over HTTP that allows clients such as browsers or mobile applications to interact with backend services.7dbca349-b7bf-4d96-b524-1f8716de980bSun, 08 Mar 2026 22:30:52 GMThttps://sergiodxa.com/glossary#static-assetsFiles such as images, fonts, stylesheets, and scripts that are served directly to the browser without server-side processing.121455a1-648e-4126-a31f-a7133976d4d3Sun, 08 Mar 2026 22:30:11 GMThttps://sergiodxa.com/glossary#routingThe mechanism that determines which content or component should be displayed based on the current URL, either handled by the server or by client-side routers in SPAs.2df07188-259e-4847-bf4a-e2bf3177282eSun, 08 Mar 2026 22:29:39 GMThttps://sergiodxa.com/glossary#renderingThe process of generating the UI of an application from data and components, either on the server (SSR) or in the browser (CSR).6df4663d-97eb-485d-9b78-9fb8729dce29Sun, 08 Mar 2026 22:29:05 GMThttps://sergiodxa.com/glossary#sseA browser technology that allows a server to push real-time updates to the client over a single HTTP connection, commonly used for notifications and live feeds.96d13baf-9c49-47ca-a62e-93ff4bf1ec13Sun, 08 Mar 2026 22:27:20 GMThttps://sergiodxa.com/glossary#websocketsA protocol that provides persistent, bidirectional communication between a client and a server, allowing real-time features such as chat, live updates, and streaming data.b5239841-8c6a-4e25-9bf3-5baa46584df4Sun, 08 Mar 2026 22:26:21 GMThttps://sergiodxa.com/glossary#idempotencyA property of an operation where performing the same request multiple times produces the same result, commonly used in APIs to make retries safe.928483fe-93f2-4a94-85ee-ae28e54de881Sun, 08 Mar 2026 22:25:29 GMThttps://sergiodxa.com/glossary#cdnA distributed network of servers that cache and deliver static assets such as images, scripts, and stylesheets from locations geographically closer to users.f6dffd2b-20f5-4b58-b262-60a0b5e83e01Sun, 08 Mar 2026 22:24:57 GMThttps://sergiodxa.com/glossary#cachingA performance technique where responses or computed data are stored temporarily so future requests can be served faster without repeating the same computation.ebbec730-f8cf-480a-8eee-71029a5c9847Sun, 08 Mar 2026 22:24:08 GMThttps://sergiodxa.com/glossary#rate-limitingA technique used by APIs and servers to restrict how many requests a client can make within a given time period, protecting systems from abuse or overload.3d102d04-2544-440f-aaea-8438007b9c58Sun, 08 Mar 2026 22:23:37 GMThttps://sergiodxa.com/glossary#webhooksA mechanism where one system sends HTTP requests to another when specific events occur, allowing applications to receive real-time updates without polling an API.5bc43df2-aa10-4329-bb02-89a6b92a7249Sun, 08 Mar 2026 22:22:54 GMThttps://sergiodxa.com/glossary#edge-runtimeA lightweight JavaScript runtime designed to run code at the edge of a CDN network, commonly used for Edge Functions and SSR close to the user.585bb226-ad6a-48c6-b224-ecfc76942577Sun, 08 Mar 2026 22:22:24 GMThttps://sergiodxa.com/glossary#rscA React rendering model where components run on the server and send serialized UI to the client, reducing the amount of JavaScript needed in the browser.619c2cb3-0a21-4192-b263-6fd8e4896e8fSun, 08 Mar 2026 22:21:43 GMThttps://sergiodxa.com/glossary#optimistic-uiA UX pattern where the interface updates immediately after a user action assuming the server operation will succeed, later reconciling the UI state with the server response.c6010655-3770-49fa-b2f4-e367b4d2b116Sun, 08 Mar 2026 22:09:08 GMThttps://sergiodxa.com/glossary#progressive-enhancementA web development strategy where a website works with basic functionality using HTML and server responses, and enhances the experience with JavaScript when available.1794e860-1d8c-484b-9a69-840d5f60a709Sun, 08 Mar 2026 22:07:19 GMThttps://sergiodxa.com/glossary#pkceAn extension to the OAuth2 Authorization Code Flow that protects public clients from authorization code interception by requiring a one-time secret during token exchange.0394daeb-81ef-4d35-8179-2d9ca6100c54Sun, 08 Mar 2026 22:06:35 GMThttps://sergiodxa.com/glossary#resource-serverA server that hosts protected resources and validates access tokens before granting access, commonly implemented as an API that trusts tokens issued by an Authorization Server.ae9284b7-4c81-4c83-9b0e-86bb7a120f51Sun, 08 Mar 2026 22:05:53 GMThttps://sergiodxa.com/glossary#authorization-serverA server responsible for authenticating users and issuing tokens such as access tokens and refresh tokens, acting as the central authority in OAuth2 and OpenID Connect systems.635eb6a7-1248-433c-9963-50c47020ea4eSun, 08 Mar 2026 22:05:21 GMThttps://sergiodxa.com/glossary#refresh-tokenA token used to obtain new access tokens from an Authorization Server without requiring the user to authenticate again, typically long-lived and stored securely by the client.08ad7578-9ba1-46e0-95db-680db69a6c24Sun, 08 Mar 2026 22:04:53 GMThttps://sergiodxa.com/glossary#access-tokenA credential issued by an Authorization Server that allows a client to access protected resources on a Resource Server, typically short-lived and included in API requests.6897bce3-e6ca-48f5-af3a-98de03ad0f1fSun, 08 Mar 2026 22:04:08 GMThttps://sergiodxa.com/glossary#jwksA JSON document containing one or more JWKs, typically exposed through a public endpoint so Resource Servers can retrieve the keys required to validate JWT signatures.1b964a48-759e-460c-bade-cbfd42fc1b64Sun, 08 Mar 2026 22:03:29 GMThttps://sergiodxa.com/glossary#jwkA JSON representation of a cryptographic key used in web security systems, commonly published by Authorization Servers so other services can verify signatures on JWTs.9582a7bf-e204-413e-a90c-c73e6be748dbSun, 08 Mar 2026 22:02:48 GMThttps://sergiodxa.com/glossary#jwtA compact and self-contained token format used to securely transmit claims between parties, commonly used in authentication systems where an Authorization Server issues tokens to clients.d8abb472-6673-4e07-aaf4-a11589a2d533Sun, 08 Mar 2026 22:02:04 GMThttps://sergiodxa.com/glossary#api-gatewayA service that acts as a single entry point for multiple backend services, handling routing, authentication, rate limiting, and request transformation before forwarding requests to internal APIs.ae47c122-685a-4184-a179-1150f8b2b5a7Sun, 08 Mar 2026 22:01:02 GMThttps://sergiodxa.com/glossary#edge-functionsSmall serverless functions that run at the edge of a CDN network close to users, often used for authentication, request rewriting, personalization, and lightweight SSR.36128bcf-77c9-4109-b09e-da37da43b735Sun, 08 Mar 2026 22:00:31 GMThttps://sergiodxa.com/glossary#serverlessA cloud computing model where applications run as short-lived functions managed by a platform, allowing developers to deploy code without managing servers or infrastructure.279a48a6-645f-4628-9718-6b6ad180dc05Sun, 08 Mar 2026 22:00:09 GMThttps://sergiodxa.com/glossary#microservicesAn architectural style where an application is composed of multiple independent services that communicate over a network, each responsible for a specific capability and deployable independently.0d049e99-05ae-4561-bef5-0f524fe160c4Sun, 08 Mar 2026 21:59:09 GMThttps://sergiodxa.com/glossary#monolithAn application architecture where the frontend, backend, and business logic are developed and deployed together as a single system rather than split across multiple independent services.f04f0c2a-ef24-4c8b-9630-a4a9f1716d73Sun, 08 Mar 2026 21:58:37 GMThttps://sergiodxa.com/glossary#bffAn architectural pattern where a backend service is built specifically for a particular frontend, aggregating data from multiple services and shaping responses for that client.86f0ca96-5272-4579-befb-4f599dafe799Sun, 08 Mar 2026 21:58:07 GMThttps://sergiodxa.com/glossary#edge-renderingA rendering strategy where SSR runs on edge runtimes located close to users, reducing latency compared to rendering requests in a centralized server or traditional backend.405ab055-30bd-4462-9d82-eff2abb3ac38Sun, 08 Mar 2026 21:57:15 GMThttps://sergiodxa.com/glossary#streaming-ssrA variation of SSR where the server sends HTML to the browser in chunks as it is generated, allowing the browser to begin rendering the page before the full response is complete.e9aec628-1df0-4e74-8130-fe17a7f0592fSun, 08 Mar 2026 21:56:16 GMThttps://sergiodxa.com/glossary#islands-architectureAn architecture where most of a page is static HTML but small interactive sections, called islands, are hydrated as independent components instead of turning the entire page into a SPA.1b0eb4d9-9fdc-405f-ae87-5efb4c7c2c7bSun, 08 Mar 2026 21:55:23 GMThttps://sergiodxa.com/glossary#partial-hydrationA rendering strategy where only specific parts of a server-rendered page are hydrated with JavaScript instead of the entire document, reducing the amount of JavaScript executed in the browser.c3dab2c9-b8c6-4435-8653-ce29931e3cf4Sun, 08 Mar 2026 21:53:04 GMThttps://sergiodxa.com/glossary#hydrationThe process where client-side JavaScript takes control of HTML generated by SSR, attaching event listeners and restoring application state so the page becomes interactive.3d08400d-a866-4c80-a009-2d0e2f6769daSun, 08 Mar 2026 21:52:12 GMThttps://sergiodxa.com/glossary#hdrA development-time compiler feature where the data used by an application is replaced at runtime without reloading the application and losing any in-memory state.bc2eb837-3536-4123-8996-5b730848b179Sat, 24 Feb 2024 22:39:38 GMThttps://sergiodxa.com/glossary#hmrA development-time compiler feature where the code is replaced at runtime without reloading the application or server and losing any in-memory state.e23b9caf-8664-4a59-baba-2a13d907834fSat, 24 Feb 2024 22:39:11 GMThttps://sergiodxa.com/glossary#pprAn application rendering strategy where SSG is used in combination with SSR to generate at build time the static parts of an HTML document and then use SSR to stream the dynamic parts at runtime.9bf4bfe2-ce67-4434-bfc7-cc685090d1c4Sat, 24 Feb 2024 22:37:34 GMThttps://sergiodxa.com/glossary#isrAn application rendering strategy where SSG is used combined with SSR to update or generate new static HTML files at runtime without re-building the application.5a651351-acf5-469d-9477-24c6f189114eSat, 24 Feb 2024 22:34:42 GMThttps://sergiodxa.com/glossary#ssgAn application rendering strategy where the server generates static HTML files at build time instead of runtime. Updating those static files require a new build of the application.3b0f4555-145b-4e05-8511-92a53818c50dSat, 24 Feb 2024 22:32:58 GMThttps://sergiodxa.com/glossary#pespaA progressively enhanced SPA that uses SSR on document requests, and after JS loads start working as a SPA, while most if not all of the behavior can stil work before JS work.35ef91f1-83ec-45eb-bd1c-1f87d646e8f4Sat, 24 Feb 2024 22:29:36 GMThttps://sergiodxa.com/glossary#pempaA progressively enhanced MPA that uses JS, general navigation happens like a MPA but in-page changes happens with or without JS to fetch more data as the user interact with the application.9ef4817e-1422-4290-8ffa-78d6119c7b8bSat, 24 Feb 2024 22:26:00 GMThttps://sergiodxa.com/glossary#apiCode interface used to interact with an application. It can go from a function in a library, a method in the runtime of the code to an HTTP based one using URLs and HTTP methods.177f305e-f399-4bdb-8edc-808120474cd5Thu, 01 Feb 2024 18:54:06 GMThttps://sergiodxa.com/glossary#mpaAn application navigation strategy where the navigation between routes/views happens by requesting a new document from the server.56dc4168-133f-41e2-99bf-9f9675ca8520Wed, 31 Jan 2024 22:16:18 GMThttps://sergiodxa.com/glossary#spaAn application navigation strategy where the navigation between routes/views of the application happens client-side without creating a new document request.59e67e60-4785-4afd-8c40-fb3f1015cf9dWed, 31 Jan 2024 22:15:08 GMThttps://sergiodxa.com/glossary#csrAn application rendering strategy where the rendering happens in a client, typically the browser, in the same process event listeners are attached to react to them and re-render the UI.5c247b74-4238-4fd6-bc55-6e245d5f0bfeWed, 31 Jan 2024 22:12:58 GMThttps://sergiodxa.com/glossary#ssrAn application rendering strategy where the rendering happens in a server, typically at runtime when a new render is requested.33b0a467-cd5c-4da2-a9f3-0471caa71aefWed, 31 Jan 2024 22:12:48 GMT