GraphQL Reference Guide: Building Flexible and Understandable APIs
This online guide aims to answer pertinent questions for software architects and tech leaders, such as: Why would you use GraphQL? Why should you pay attention to GraphQL now? How can GraphQL help with data modelling in the Enterprise? [infoq.com]
OpenAPI meets SLA - OpenAPI Initiative
This post is authored by Dr. Pedro J. Molina, Founder at Metadev & Member at ISA Group, University of Seville . The Special Interest Group on SLAs inside OpenAPI is working to create an extension to define Service Level Agreements for API. by ncaidin [openapis.org]
Finding a Good Open Governance Model for AsyncAPI | AsyncAPI Initiative
AsyncAPI can be successful if the initiative is community-driven. To be community-driven, we need the community to see it can drive things and make an impact. For that, we need a proper open governance model. What model would be the best? [asyncapi.com]
gRPC Long-lived Streaming - Code The Cloud
In this blog post I'll explore a way to implement gRPC long-lived streaming. Using gRPC is perfect for cloud native applications mainly since it is modern, bandwidth and CPU efficient and low latency which is exactly what distributed systems require. If you're reading this I assume you are already familiar with gRPC. [dev.bitolog.com]
Spotlight: API Security and Vulnerabilities
API Scanning with Burp Suite
Both Burp Suite Professional and Burp Suite Enterprise Edition contain Burp Scanner - allowing users to easily scan web applications for vulnerabilities. Other blog posts cover how Burp Scanner's crawler follows links in web pages to find attack surfaces that might expose security vulnerabilities. [portswigger.net]
How we could have tracked anyone's live location using Truecaller's "Guardians" app
Truecaller has recently launched a new application named "Guardians," a safety app that lets users share their live location permanently with Guardians that they have chosen from their contacts.If you are using this application, your selected contacts are supposed to track your location in real-time. [pingsafe.ai]
Issue 122: API issues at Clubhouse and healthcare apps, scope-based recon, OAS v3.1.0 - API Security News
This week, we take a look at the recent data spill incident at Clubhouse, the (poor) state of API security in major healthcare mobile applications, how scope-based reconnaissance methodology works, and the latest update (v3.1.0) to the OpenAPI Specification. Clubhouse is an audio-only social network app for iPhone. [apisecurity.io]
Authentication as a Hypermedia API
User Authentication - the process of answering the question of who someone is - has evolved greatly over the last few years. From the dawn of computer security until fairly recently, User Authentication has been predominantly represented by password protection. [nordicapis.com]
API Management for Asynchronous APIs
WSO2 sponsored this post. Today, customers increasingly demand access to real-time information like stock prices, train times, etc. Delivering this critical information, as it occurs, is a challenging task for every business. Traditionally, applications polled backend servers to fetch the latest information; however, this proved to be inefficient, as it consumes a significant amount of resources.... by Menaka Jayawardena, Andrew Davis, Saif Gunja [thenewstack.io]
The Business of APIs
