Application Programming Interface - a set of protocols and tools for building software applications that specify how software components should interact.

Representational State Transfer - an architectural style for designing networked applications using stateless communication protocols, typically HTTP.

A specific URL where an API can be accessed. Each endpoint represents a different function or resource in the API.

The process of verifying the identity of a user, device, or system. It answers the question 'Who are you?'

The process of determining what actions an authenticated user is allowed to perform. It answers the question 'What can you do?'

JSON Web Token - a compact, URL-safe means of representing claims between two parties, commonly used for authentication.

Role-Based Access Control - a method of restricting system access based on the roles of individual users.

An architectural approach where an application is built as a collection of small, independent services that communicate over a network.

Continuous Integration/Continuous Deployment - practices that enable development teams to deliver code changes more frequently and reliably.

The time delay between a request being sent and the response being received. Lower latency means faster response times.

The amount of data or number of requests that can be processed in a given time period.

Service Level Agreement - a commitment between a service provider and client that defines the expected level of service.