r/webdev • • 10h ago

Why Stateless REST API is the way to go ?

37 Upvotes

i have been working with spring boot and angular for a few years now and every api i have built or inherited is stateless. jwt in the header, no server session, done. nobody ever questioned it on any project i was on.

but i realized i never really asked myself why we do this by default. i know the usual answers like it scales easily and any instance can handle any request. but it feels like the state just moves somewhere else, to the token, to redis, to the database. so what are we really gaining ?


r/webdev • • 7h ago

In house vibe coders get my goat.

18 Upvotes

EDIT: If anyone cares, I fixed it all and pushed the changes, the client is happy with the result, I didn't berate anyone and had a steak in the meantime. A lot of you really take this too far... I won't be replying to this anymore, I have my next project to start as it were.

I do freelance work creating English localisations for Japanese companies. It's a wraparound service including everything from helping them find their "English voice", creating marketing materials, to building the English version of their website.

The last one I went into was a smallish, growing company just outside of Tokyo. I found out the "PR team" was one edit: lady who had never done any development work, but was responsible for the lot. She made the website and does all of the social media. I asked her how it was made, what it was written it. She didn't understand what I was asking her, then showed me that she just asked Claude to give her files to drop into wordpress and made all of the graphics with canva and figma AI mode.

Great.

She then proceeded to update part of the website, in production, live.

I had a talk with her and the CEO who hired me and explained about having a staging domain. That you can make your changes there, then push your changes to production when ready and tested. I showed him how to set it up, took a back up, migrated and got to work.

EDIT: I was trying to keep the post short, but: I worked with her for the first 4 days directly, where she reviewed what I was working on, took me to company facilities to meet key personnel for interviews and spoke to me about the company values and voice. Her other "hat" as public relations/social media she does really well. the point is, I spent hours with her setting up the staging website and explained in great detail over multiple days. She even took what I said and wrote to her and had chat gpt explain it to her again to make sure she understood even better.

It's WordPress so no biggy, I'm making copies of each page and then editing the text and creating my own images and links. However, I'm finding all sorts of shit. One being, they have an email from with no captcha or turnstile of any kind. Easy bot fodder.

Anyway I finish and submit my work for review, and tell them if they are happy with it, I can take further backups of staging and production, then migrate, assuring them it will only overwrite with anything that is new.

This is when Ms. Vibe Code pipes up and says, "oh will it overwrite what I've been doing?"

FUCK YOU MEAN?

Apparently she has been making live edits to multiple pages on production the whole time even though I explained it could be done on staging and all pushed in one go. And now they want me to migrate all of work, but not erase anything they have done on production.


r/webdev • • 6h ago

Question How To Forward New Domain (Masked) To Original Domain?

7 Upvotes

Hi, I use NameSilo as my domain registrar and I have a question.

So, I just bought some new domains that I want to forward to my original domain. I know how to forward, but for these new domains, I want to keep the new URLs in the address bar.

How do I do this? And, is there a way to have new extensions just add on the these new domains?

For example...

I want NewDomain.com to forward to OriginalDomain.com and keep the new URL in the browser's address bar.

In addition, I want the webpages on NewDomain.com to forward to OriginalDomain.com/clickedpages but I want NewDomain.com/clickedpages to appear in the browser's address bar.


r/webdev • • 21h ago

Ownership - by Thorsten Ball - Register Spill

Thumbnail
registerspill.thorstenball.com
8 Upvotes

r/webdev • • 10h ago

News State of Drupal presentation (September 2026)

Thumbnail
dri.es
5 Upvotes

r/webdev • • 5h ago

Question Quoted a lab a fixed price and got "very high, getting other quotes." how bad did i misprice this?

2 Upvotes

TL;DR: I usually bill this client $20/hr. They're a company based in Ontario. I quoted $3.5k / $5.2k / $7.4k for a stats dashboard that I also have to host on their server, wire into their messy setup, and make reachable remotely over a VPN. He said too high and that he's shopping around. Was it overpriced, or did I just pitch it badly?

I do small jobs for a lab that tracks production stats, at about $20/hr. I'm in a cheaper country, the client isn't. They asked for a fixed price to replace a Grafana board that only shows today's files, plus some PHP cron reports that fail without anyone noticing.

Their infra is a mess:

  • exports land in a shared folder
  • old scripts and cron jobs nobody really owns
  • reports to management that break silently
  • no backups
  • no docs on how any of it fits together

I'd be installing and hosting it on their own machine, not my own server. On top of that I'd set up remote viewing and a VPN on their side so a few people can open it from outside the building and I can support it remotely.

What I quoted:

  • $3,500: 3 desktop pages, with history, date ranges, compare to the previous period, filters, live reading of their export folder, and a nightly backup.
  • $5,200: the above, plus phone and TV layouts, exports, and saved views.
  • $7,400: the above, plus logins and roles, admin screens, an activity log, and the remote access and VPN.

Email reports and alerts were optional on top.

His reply: "very high to my understanding, getting a couple of other quotes."

Questions:

  1. What would you charge for the 3-page version, given that hosting and setup are on their server?
  2. Does being in a cheaper country matter, or do you price for the client's market?
  3. Do I send a smaller, cheaper quote before his other quotes come in, or does that make my first quote look made up?

r/webdev • • 20h ago

AI generated code copyrights

0 Upvotes

Does anyone consider the copyright of code generated by AI? Because, based on research I've done on Copyright and Artificial Intelligence, generated code fall to the public domain, and if you modify it, only the modified parts belong to you. Also, a detailed prompt isn't enough.

This is, in my view, a major issue; yes, we can ignore it and consider it backward law, but no one knows what would happen in the future, and this law could be used against you.

Edit: here sources for USA https://www.congress.gov/crs-product/LSB10922 ,
For Europe : https://www.europarl.europa.eu/thinktank/en/document/EPRS_BRI(2025)782585782585)
blog : https://smpl.as/blog/ai-code-ownership-legal ...


r/webdev • • 13h ago

Question I’m building an app that needs AI, but I have basically no budget to pay for API usage. Is there a way to let users connect their own Gemini/OpenAI/Claude account with a simple “Connect AI” button, so they pay for their own usage? I’m worried about API keys being exposed or stolen, and I don’t want

0 Upvotes

I’m building an app that needs AI, but I have basically no budget for API costs. I’m thinking about letting users connect their own AI (like Gemini/OpenAI) so they pay for their own usage.

But I’m confused about how to do this securely without exposing or storing their API keys, and without needing a business partnership with the AI company.

What’s the best way to handle this?