The week in API strategy, news, articles, and upcoming events.
James Higginbotham, Curator  A hand-curated weekly newsletter for API developers, sponsored by LaunchAny and CaseySoftware

Find this via Twitter? Subscribe now so you don't miss out

API Developer Weekly

Mar 5, 2020 - Issue #298
This week's topics include some AsyncAPI coverage, securing your API, a request for API feedback from OGC, and an article from me on when microservices might be the wrong choice for your project. Happy reading! -- James
Hot Topics
AsyncAPI for documentation and validation of event-driven architecture
In this blog post, you'll read about what is AsyncAPI and how at relayr we use it for validation of documentation of messaging between dozens of Node.js services. Let's first talk a little about OpenAPI and Swagger. The Swagger specification was founded back in 2010 as a design specification for RESTful APIs. by Waleed Ashraf []

An Introduction to Securing Your New API
What with the rapid growth of the API economy, more sensitive data is shared through APIs than ever before. As a natural consequence of this, there are severe stakes around API security, and they're only rising. by Thomas Bush []

Nunjucks templating explained on the basis of AsyncAPI specification | AsyncAPI Initiative
Specifications exist for a reason. Among other things, they help to bring quality, consistency, and standardize a given area. They are a great use case for templating engines. You can prepare a template that generates something from any document that follows a particular specification. []

OGC Requests Public Comments on OGC API
OGC API - Features provide the fundamental API building blocks to create, modify, and query 'features' on the Web (features are simply the digital representations of objects of interest in the real world). OGC API - Features is comprised of multiple parts, with each part being a separate standard. []

Choosing the Best Machine Learning API for Your Project
SPD Group compares Microsoft, Amazon, and Google Cloud APIs to help determine which machine learning API is best for your project. Machine Learning (ML) and Artificial Intelligence (AI) projects are complex and multifaceted. If you're building in these environments, APIs are a tool you simply can't do without. by Helen Kovalenko []

Technical Writing | Google Developers
We've aimed these courses at people in the following roles: professional software engineers computer science students engineering-adjacent roles, such as product managers You need at least a little writing proficiency in English, but you don't need to be a strong writer to take these courses. []

APIs for Makers
Next, you need to enable communication between your Slack and Typeform accounts so that when a form is submitted on Typeform, the data of that event will go to your Slack channel. You can do this by exporting your code to act as a webhook API that will handle a form.submitted event on Typeform. by Janeth Ledezma []

The Business of APIs
GitHub Actions API Released into Public Beta
GitHub announced the release into public beta of their Actions API. The Actions API can be used to manage GitHub Actions via a REST API. Endpoints available within the API allow for managing artifacts, secrets, runners, and workflows. GitHub Actions allow for automating workflows based on repository events such as push, issue creation, or the creation of a new release. []

Hasura raises $9.9M Series A to simplify GraphQL for developers
Hasura, a startup working to solve developer problems around connecting to databases when using the open-source GraphQL tool, announced a $9.9 million Series A investment today. Vertex Ventures US led the round, with participation from SAP.iO Fund and existing investors Nexus Venture Partners and S... []

How The Decoupled Nature of Web APIs Gives Organizations Incredible Flexibility (includes video)
David Berlind delivers Part 2 of his long-running college course on APIs reviews the importance of API contracts and what it means for Web APIs to decouple API clients from API servers. He provides real-world examples of how that decoupled nature affords some amazing flexibility. []
(Un)Related Topics
When microservices might be the wrong choice
Since containerisation became more common, the option to move to a microservices have been gaining in popularity. However, they may not be the right choice for all organisations. To determine if moving to microservices should be a consideration for your organisation, we need to first understand the benefits of microservices and weigh them against the negative aspects before we can make a fully-informed decision. by James Higginbotham []

The Elephant in the Architecture
Ian Cartwright Ian Cartwright is a Director at ThoughtWorks, where he applies his two decades of experience as an software architect and hands-on developer to help clients improve their technical capabilities. A good first step in assessing the business value in your architecture is to do a value stream mapping that focuses on the various systems and components in the IT landscape. []

Ghostcat bug impacts all Apache Tomcat versions released in the last 13 years
Apache Tomcat servers released in the last 13 years are vulnerable to a bug named Ghostcat that can allow hackers to take over unpatched systems. Discovered by Chinese cybersecurity firm Chaitin Tech, Ghostcat is a flaw in the Tomcat AJP protocol. AJP stands for Apache JServ Protocol and is a performance-optimized version of the HTTP protocol in binary format. by Catalin Cimpanu []

Useful Resources
Upcoming Web API Events
A list of upcoming Web API Events, maintained by Matthew Reinbold

API Security Events
A list of upcoming API security events from

Tyk Whitepaper: Approaching your API Strategy
As well as writing for the James Higginbotham is an Executive API Consultant with experience in API strategy and software architecture. James guides enterprises through their digital transformation journey to deliver a great customer experience and provides training in API and microservice design. []

Book: A Practical Approach to API Design by Casey and Higginbotham
If you read the tech press, everyone knows they need an API but most aren't really sure what it is. They treat it as another checkbox like "Web 2.0" was a few years ago or a mobile app was most recently. In fact, there’s an entire “API-first” movement in development circles that most people don’t understand or even realize why. In this book, we'll start by discussing the what an API is, why you might need one, and follow up with the how to build one. []

Want to share something?
As always, if you want to chat, share a link, or make a suggestion, feel free to drop us a quick note or tagging us on Twitter (@launchany and @caseysoftware) or by emailing us at:
Follow on Twitter    Forward to Friend    Subscribe
Copyright © 2020 LaunchAny, All rights reserved.
unsubscribe from this list