Systems | Development | Analytics | API | Testing

September 2020

A Five Step Framework to Scale, Optimize & Accelerate API Standardization

Consistency is one of the most critical elements of accelerating API development as organizations try to meet increased demand, quality expectations, and regulatory requirements. Without a consistent API design to developers, there is no guarantee that the final result will match the intended purpose or the application depending on the API can function properly.

Kong Named a Leader in the 2020 Gartner Magic Quadrant for Full Lifecycle API Management

In 2018, Kong was first positioned onto the Gartner Magic Quadrant for Full Lifecycle API Management Market as a Visionary. This in itself was a very impressive feat given that Kong was started as an open source project just three years before that. I believe Kong’s progress on the Magic Quadrant in this short span of time speaks to how we have aligned Kong’s solutions to our customers’ most challenging problems.

Google named a leader in the 2020 Gartner Magic Quadrant for Full Life Cycle API Management

We’re excited to share that Gartner has recognized Google (Apigee) as a Leader in the 2020 Magic Quadrant for Full Life Cycle API Management, marking the fifth time in a row we’ve earned this recognition. In this year’s report, Google (Apigee) is placed highest among all the vendors for the ability to execute.

How to Guide Customers on API Integration Automatically with Moesif

You have an API program that developers are adopting; Customers have signed up, but some haven’t integrated yet; Of those that have integrated, a few got stuck early on and went silent; Ideally, you’d like to help both sets of customers move through the developer funnel. Moesif can act a catalyst for your developers, proactively informing them of integration issues before frustration sets in and they give up. Ensure they have a good experience – unblock your customers ASAP.

How to Incorporate Facebook OAuth 2.0

There is no debate that the advent of OAuth 2.0 made the lives of developers everywhere better. OAuth 2.0 makes adding an authentication system to your app or web page became considerably easy. Many different service providers support the OAuth 2.0 spec and, in turn, so does DreamFactory. Below are the supported OAuth services DreamFactory which are supported natively.

How to Secure Your API Against Attacks and Intentional Misuse

Hiring a New York or Menlo Park white-shoe law firm to write your app’s Terms of Service (ToS) might bring peace of mind, but how do you ensure that your expensive rules are actually adhered to. Just like the pervasive abuse of customer review guidelines in B2C companies, B2B companies also suffer from multiple/unverified review problems. Similarly, by their design, APIs are also vulnerable to misuse by bad actors, but this time through brute force attacks.

How to Properly Deprecate an API using Moesif

As with any product lifecycle, a key responsibility for API architects and API product owners is deciding when to sunset or retire a feature or offering. The API lifecycle is no different, but requires careful planning to carry out the deprecation to minimize customer impact. Unlike a packaged solution or module which is more of a black box, APIs enable your customers to build custom functionality which may have required months of integration work and testing.

How to Load Test OAuth secured APIs with k6?

The outline of this article is as follows: Most systems are designed to treat users differently based on their identity. Therefore, users are authenticated via various mechanisms and it's often equally important to test the performance of anonymous and authenticated endpoints. One of the most widespread authentication standards used by today's applications is OAuth. In OAuth, we use a trusted third party to verify the identity of the user.

Kong for Kubernetes 0.10 Released With Ingress v1 Resource, Improved Ingress Class Handling, and More!

Kong for Kubernetes is a Kubernetes Ingress Controller and a full-fledged edge-router which can route traffic to any destination of your choice. In addition to Ingress management, it provides enhanced security and management capabilities. With Kong, you can use Kubernetes not just for running your workloads but also for securing and monitoring connectivity between your workloads – all managed via Kubernetes manifests .

Executing SQL Joins in REST APIs Using DreamFactory

As a follow up to our previous blog post about retrieving related data from that REST API, I wanted to dive deeper into the power of the “related records” feature of DreamFactory’s database-backed APIs. One of the powerful features of SQL databases is the ability to relate separate data records and perform queries that retrieve that related data all at once. One problem is that this requires a fairly in-depth knowledge of your database, it’s schema, and SQL syntax.

Playbook for Automatically Keeping Customers Informed of Integration Issues

This is the second in a series of playbooks that walks you through the steps required to automate key monitoring and altering functions within your product. Through automation, Moesif will save you time, resources and energy. Automating repetitive processes is a key attribute in whole-product design. By combining payload observability with behavioral emails, Moesif’s able to make you more productive through sophisticated workflows of many functional, performance and product issues.

How to Stand Up Web and API Product Analytics with Nodejs

This guide walks you through how to stand up cross-platform analytics to track customer behavior across both your APIs and web apps. By tracking customer behavior on both APIs and web apps, you’re able to fully understand the customer journey and metrics like Time to First Hello World and Time to Value. However, gathering the data by itself isn’t enough. After all, if it’s not acted on, it’s not of much use.

Faster, more powerful apps for everyone: What happened at Next OnAir this week

Week nine of Google Cloud Next ‘20: OnAir is in the books—and what a week it was! From Google Cloud GM/VP Amit Zavery’s keynote to product announcements to customer demos to Google SVP Urs Hölzle presentation and Q&A, we explored multiple ways enterprises are leveraging APIs and no-code application development to accelerate their digital transformations. There was a lot to absorb, so let’s take a look back.

Multi-Cluster & Multi-Cloud Service Meshes With CNCF's Kuma and Envoy

When we first created Kuma – which means “bear” in Japanese – we dreamed of creating a service mesh that could run across every cluster, every cloud and every application. These are all requirements that large organizations must implement to support their application teams across a wide variety of architectures and platforms: VMs, Kubernetes, AWS, GCP and so on.

How APIs and ecosystem strategies accelerate digital transformation

Innovation is a topic of conversation in almost every enterprise, but a related topic that sometimes goes under-discussed is co-innovation—that is, the idea that enterprises can unlock a lot of powerful business innovation by partnering outside the organization. Often called a digital ecosystems strategy, this tactic involves different participants sharing data, functionality, and other digital assets for symbiotic benefit.

Managing DreamFactory Scripted APIs with GitHub and Your Favorite IDE

DreamFactory's scripted service feature ranks among the most popular capabilities, allowing developers to create APIs using PHP, Python, or NodeJS which can then be secured using role-based access controls, accessed using auto-generated API keys or other authentication providers such as Active Directory and Okta, and executed alongside other APIs as part of an API composition-based workflow.

Accelerate digital transformation with business application platform

2020 has been among the most disruptive years business leaders have ever confronted, with many enterprises absorbing several years of digital transformation over just a few months. These ongoing efforts have not been easy, with numerous organizations finding their existing resources and workflows won’t scale and don’t allow them to move quickly or responsively enough. They need to rethink how transformation occurs and how different parts of the workforce can participate.

What is API-first? 5 opportunities to create business value

Our recent CIO survey with Oxford Economics contained a few takeaways that stood out to me: most companies are using API-first strategies, and those most committed to this concept report faster innovation and greater value from business partnerships. Even so, the survey indicates that a healthy minority of enterprises still think of APIs in integration-first terms.

Kong Demo: Protecting Microservices with Servicemesh

In this interactive demo, we will show how to encrypt and protect all services inside a service mesh using the Kuma Mutual TLS policy. We will then demonstrate how to control traffic permissions among each individual service using the TrafficPermission policy. In addition to security, Kuma provides traffic metrics using Prometheus and Grafana dashboards, as well as traffic tracing (APM) and traffic logging integrated into managed cloud logging and analytics services.