Copy
The week in API strategy, news, articles, and upcoming events.
James Higginbotham, Curator  A hand-curated weekly newsletter for API developers, sponsored by LaunchAny and CaseySoftware

Find this via Twitter? Subscribe now so you don't miss out
 
 

API Developer Weekly

Sept 15, 2022 - Issue #423
This week's featured articles focus on developer experience. While often discussed, not all APIs or developer-focused products do a great job of delivering on a great DX. We also have a discussion on design first in an agile world, a look at design thinking beyond UI/UX, and accessibility as part of the developer experience. Finally, SoftwareAG looks at starting with your customers before you start your API.

Happy Reading!
-- James
 
Hot Topics
Why the API Developer Experience Matters
APIs are at the center of modern business. While APIs have always played an important role in software development, the growing demand for data integration is leading to the wider adoption of APIs across every line of business. [nginx.com]

Can Agile Teams Have a Design-First Approach to APIs?
What if we used the OpenAPI specification to whip up the smallest version of an API and spin up a mock with nothing on the backend, just to test it out? [thenewstack.io]

Design Thinking Is Not Just About UI/UX
To me, While doing any task " What" and " How" of the work are important but the most important is " Why's". A strong why helps me to come up with solutions, ideas, and sources of motivation in a long run. by Redmen Ishab [ishab.medium.com]

#A11y: Accessibility Is Part of the Developer Experience
The tech industry works hard to break away from monolithic architecture. Yet, we've neglected to move away from the idea of the monolithic developer experience. Whether it's internal or external, developer experience -sometimes called DX, DevEx, developer enablement, or developer productivity-is the effort to improve the overall user experience a developer has with your product, service, or organisation. by Jennifer Riggins [blog.container-solutions.com]

Triggering Workflows from Google Sheets
Is it possible to integrate Google Workspace tools such as Calendar, Sheets, and Forms with Workflows? For example, can you trigger a workflow from a Google Form or a Sheet? Turns out, this is not only possible but also easier than you might think. Let me show you how with a sample use case. by Mete Atamel [medium.com]

What is Mayhem for API?
Mayhem for API automates testing REST APIs by bringing the full might of fuzzing methodology to API testing. With the guidance of an API specification , Mayhem for API provides accurate and informative test coverage tailored to any REST API. by by Editorial Staff on September 8, 2022 [securityboulevard.com]

API Security Best Practice 2022 - Cloud Security Podcast
Ashish Rajan: Hello, welcome to another episode of Cloud Security Podcast . This is September, and this is a new month and we are talking about modern security stack this month. Basically we have been talking to a lot of people over a lot of conferences. We did RSA AWS re:inforce, Defcon, Blackhat. by ashish [cloudsecuritypodcast.tv]

Why broken access control is the most severe vulnerability
Imagine that your friend Bob creates a website, and you and Alice create an account on the website out of love and care for your friend. The website implements role-based features, meaning that Bob is the admin and can add, delete, modify products, and delete users who act maliciously. by Security Lit Limited [infosecwriteups.com]

Your APIs Have No Clothes
The rapid move to a distributed workforce during the pandemic turbocharged cloud adoption and, as a result, exponentially expanded the attack surface. Today's digital economy mostly consists of online applications in public or private clouds.They are all connected via APIs, increasing the number of access points attackers can use to gain unauthorized access to systems and networks. by by Andy Grolnick on September 9, 2022 [securityboulevard.com]

Take your API specification from Postman to Production in under 30 minutes
Plan, Build, Debug and Ship your next API An end-to-end guide on implementing an API from planning to production, including testing. Get everything you need: Low-code IDE, database, step-by-step guide, code snippets, supporting material and a live production server. Forget tooling. Forget infrastructure. Focus on delivering your API. [linx.software]

Introducing the Congress.gov API
Congress.gov is a fantastic source of legislative information, and a marvelous source for investigating specific legislation and exploring the legislative history of a bill. Congress.gov also contains large amounts of data and various users have expressed interest in having additional access to download this data. by Margaret Wood [blogs.loc.gov]
 
Business of APIs
Don't start with your API, start with your customers
API design is multi-dimensional, requiring you to consider both the business and the technology dimensions. Product management principles and techniques can help you juggle how an API is designed in both dimensions, so you don't get lost in the weeds of just the technical aspects. by Matthias Biehl [blog.softwareag.com]

Why APIs Are Important To A Digital Marketing Operation
Digital marketing operations are constantly evolving. And as a marketer, you must keep up if you want to deliver unique experiences that will attract clients, increase conversion and retain existing customers. Since companies use many different products to achieve their marketing goals, APIs allow them to integrate various technologies into their services to streamline their operations. by Nahla Davies [nordicapis.com]

Algolia improves site search functionality with Search.io acquisition
Were you unable to attend Transform 2022? Check out all of the summit sessions in our on-demand library now! Watch here. AI-powered search API platform provider Algolia is acquiring privately held vector-search vendor Search.io in a deal being formally announced today. Financial terms of the deal are not being publicly disclosed. by Sean Michael Kerner [venturebeat.com]

(Un)Related
Event Storming to split Monolith into Microservices
On our previous installments, we discussed the smells that can happen when splitting microservices, and the strategies that exist to make them as independent as possible. But how do we define boundaries? How do we define the process that our microservice is in charge off? Event storming is a technique that is part of DDD. by Kanekotic [kanekotic.medium.com]

What are UTF-8 and UTF-16? Working with Unicode encodings
UTF-8 and UTF-16 are the two most commonly used encoding for Unicode characters. Unicode defines a large character repertoire (1.1 million in theory, of which 145k are defined in Unicode 14.0) which begs the question how to encode all these characters. UTF-8 and UTF-16 are two of the encodings that Unicode defines, and the most popular ones today. by Erik Wilde [youtube.com]

Attribute-Based Access Control in a Microservices Architecture
Access control is a fundamental element of the security infrastructure of any company. Every security officer wants to apply the principle of less privilege, zero-trust, segregation of duties, and other best practices without harming the company workflow. There are several approaches to organizing an access management system. by Chetan Dravekar [medium.com]

The Developer Case for Using Tim Berners-Lee's Solid
Solid is a protocol that puts data under the control of individuals rather than corporations and governments. Adoption in the US is slow. [thenewstack.io]

No-code is the future of software development, but is it secure?
According to Gartner, no-code/low-code application development will be responsible for more than 65% of application development activity by 2024, and the global no-code market is set to generate $187 billion by 2030. Judging by the numbers, it's clear that businesses see the value in migrating to no-code platforms, especially in the midst of a growing software developer gap. by Michaela Madden [blog.kintone.com]
 
 
Want to share something?
As always, if you want to chat, share a link, or make a suggestion, feel free to drop us a quick note or tagging us on Twitter (@launchany and @caseysoftware) or by emailing us at: james@launchany.com
 
UPCOMING EVENTS
Follow on Twitter    Forward to Friend    Subscribe
Copyright © 2022 LaunchAny, All rights reserved.
unsubscribe from this list