Systems | Development | Analytics | API | Testing

August 2022

Guide: OpenAPI 3 specification to Live API

This guide will take you through the steps to design an API, build it, and deploy it to production. The process will take about 20 to 40 minutes to complete all steps. The project is to build a straightforward API to retrieve product data. You will be provided with the API specification, instructions for what tools to use, relevant scripts and all steps to get the API live.

How To Use Data Warehouses To Improve Your Business

Did you know that a data warehouse has the ability to completely transform your business operation’s data storage? Data warehouses serve as powerful tools in a variety of use cases in the business world. Data warehousing implementation allows companies to better process, transform, and utilize modern data. In addition, data warehouses improve how business data is stored, enhancing decision-making and business processes through more efficient data integration and data management methods.

Native Integration: Benefits and Obstacles of Native Integrations for a SaaS Company

Nowadays, SaaS companies have to be ready to offer add-ons to their product, and many of them started having this approach to improve their customer satisfaction. Why? Because customers are looking for products that include integrations with their preferred cloud applications.

Introducing Pay-as-you-go pricing for Apigee API Management

Apigee is Google Cloud’s API management platform that enables organizations to build, operate, manage and monetize their APIs. Customers from industries around the world trust Apigee to build and scale their API programs. While some organizations operate with mature API-first strategies, others might still be working on a modernization strategy. Even within an organization, different teams often end up with diverse use cases and choices for API management.

How Partnering with Microsoft Helps WSO2 Achieve Our Cloud-First Vision

With the global increase in digital adoption, our customers must build better digital experiences for their own customers to stay relevant. There are, however, many underlying components that need to be stitched together and maintained before an organization can start building digital experiences. This process is complex and time consuming, and there are very few organizations that have the capabilities to do so.

Why Twilio Customers Are Not Going Anywhere

It’s no secret: we’re fans of API first companies like Twilio. With more than ten million customers using their platform, it seems we’re not alone. Longtime the darling of developers, Twilio’s approachable platform makes it easy to send voice, video, and SMS messages across nearly any context. Today, we’re diving into how Twilio still offers the best in customer engagement.

End-to-End API Monetization with AWS API Gateway, Stripe, and Moesif

Many API developers and companies struggle to find ways to easily set up systems to monetize their APIs. Some are simple but not customizable, some are complex and require massive engineering effort to actually get it all running. To make things easier, Moesif created a feature a few months ago called Billing Meters which gives massive customizability but with a minimal amount of code and engineering effort.

NGINX/OpenResty Event Handling Strategy for CPU Efficiency

Kong Gateway is built on Nginx/OpenResty because it has a unique master/worker architecture, forks out many worker processes, and can utilize every CPU core efficiently. It is the powerhouse within Kong. But one master / multi workers architecture has an annoying defect. Each worker is an isolated process, so it is hard to share something with each other, and in Kong Gateway, there’s a lot of information to communicate between workers, like rebuilding router/health check/cluster sync, etc.

Know the Worth of Your APIs

In some cases, you create application programming interfaces (APIs) so you can integrate the apps into your IT ecosystem. APIs can do more than improve the functionality of your microservices and optimize your apps, though. When you know the worth of APIs, you could use them to generate revenue for your business. Calculate The Cost Of Developing APIs From Scratch Calculate yours! 

Jeremy Glassenberg on Low-Code/No-Code Ecosystem | Kongcast Flash | #KongSummit2022

On this episode of #Kongcast Flash, Jeremy Glassenberg - Product Leader of APIs at DocuSign - introduces his #KongSummit2022 talk: Mapping the No-Code/Low-Code Ecosystem with Your #API Strategy. In his session, you’ll get a holistic overview of the no-code/low-code landscape, typical personas, key learnings from success and failures in the industry, and tips to create a plan as part of your overall developer story.

What Are APIs and How Do They Work?

APIs are a key aspect of our digital world and allow us to engage in digital experiences on our phones and computers every day. Every time you use an app such as Facebook or Instagram, check the weather or send an instant message, you’re using an API. So what are APIs? API stands for Application Programming Interface, which enables communication between two applications.

Stop Using TCP Health Checks for Kubernetes Applications

As developers, one of the most important things we can consider when designing and building applications is the ability to know if our application is running in an ideal operating condition, or said another way: the ability to know whether or not your application is healthy. This is particularly important when deploying your application to Kubernetes. Kubernetes has the concept of container probes that, when used, can help ensure the health and availability of your application.

What is Dynamic Sampling and How it Works

Sometimes you may want to limit the amount of analytics data coming into Moesif. This could be because you want to exclude specific traffic, such as internal or health check traffic, or you may want to reduce unnecessary data to control cost. Dynamic Sampling, available to customers on our Enterprise plan, was built to do just this. Dynamic Sampling lets you control which API calls are logged to Moesif based on customer or API behavior.

Simplifying Production-Scale API Management With Kong Konnect

Kong Konnect provides developers and API owners a powerful way to secure and manage their API products powered by Kong Gateway (the world's fastest API gateway). Leverage Konnect to manage Kong Gateway data planes operating on-prem and in the public cloud – either as a centralized APIOps platform or federated experience across business units. Ultimately, Konnect enables customers to reduce their operational costs by using our hosted runtime manager, service catalog, developer portal and analytics platform.

Kong Mesh 1.9 and Kuma 1.8 Released with Gateway GA, new CNI and More!

We are happy to announce the release of Kong Mesh 1.9 and Kuma 1.8! This release is packed with features and improvements such as observability for builtin Gateway, a complete rewrite of the CNI and projected service account tokens support. In order to take advantage of the latest and greatest in service mesh, we strongly suggest upgrading to Kong Mesh 1.9.

Easily Monetize Your APIs with Moesif Plus Chargebee

It’s always great to build something that makes money. The most successful businesses often find the easiest and most efficient ways to make money, while keeping costs and support to a minimum. After all, the best businesses and products are simply the ones that know how to build revenue. Many companies now look to monetizing their APIs as part of their overall monetization strategy. API monetization isn’t always easy though.

API Authentication: What Is It?

With cybercrime continuing to grow at an alarming rate and cybercriminals getting increasingly clever about how they get their hands on your precious data, API authentication is more important than ever. If you’ve ever logged into an app or website using your Facebook or Google account, then you’ve used API authentication. APIs are the backbone of the internet. They allow disparate systems and login pages to communicate, exchanging user data and triggering actions.

IDC Selects SmartBear as a Leader in Worldwide Automated Software Quality

We expect software to work. Slow mobile apps and buggy website functionality are unacceptable, given that two-thirds of us do our banking from a mobile app and a quarter of the workforce logs in from their home office. Low-quality, poorly designed software can undermine operational efficiency, create security vulnerabilities, and contribute to customer attrition.

Elastic stack-based Analytics Integration with WSO2 Identity Server

WSO2 Identity Server is an API-driven open source IAM product designed to help you build effective CIAM solutions. ELK-based analytics solution is introduced to view the login and session-related analytics data. Three dashboard templates are provided by default: Auth dashboard, Session dashboard, and alert dashboard. The session dashboard includes statistics related to sessions that get created for different applications accessed via the WSO2 Identity Server. Auth dashboard includes statistics related to login attempts made via the WSO2 Identity Server. The Alert dashboard includes suspicious Login Alerts and Long session alerts.

Multi-Attribute Login with WSO2 Identity Server

Depending on the business, the applications may need to authenticate with different login attributes. For example, social media applications use userId, email, or mobile number as the identifier, Internet banking applications use userId or username as the identifier, Corporate enterprise applications use email as the identifier. In WSO2 Identity Server 6.0.0 provides the capability to use different login attributes as a productized feature. It gives users the flexibility to choose their preferred identity attribute when logging in, such as email, username, or mobile number. A privileged user in the organization can configure the list of allowed attributes that can be used as the login identifier.

SwiftUI 4.0: New and updated APIs with code examples

Since Apple started using SwiftUI in its operating systems, it has been experiencing a noticeable evolution, from redesigns of apps to deep system integrations. The team behind SwiftUI has taken into account the feedback they got on Twitter and other social networking sites, resulting in some fantastic APIs to work and play with this year! Here’s a quote from the session on “What’s new in SwiftUI”: So, let’s dive into everything that SwiftUI 4.0 has to offer you!

The Costs Associated With API Integrations and How To Minimize Them

Application programming interface (API) integrations can be considerable cost savings for your business. Integrating with an API eliminates the need to develop and maintain custom integrations for each application or system you use. However, you should be aware of some costs associated with API integrations before you decide to integrate. This article will discuss the different types of expenses related to API integrations and how to minimize those costs.

WSO2 Private CIAM Cloud Delivers B2B CIAM Capabilities Through Organization Management

WSO2 Private CIAM Cloud supports B2B and B2C business models through the B2B organization management feature. Unlike other CIAM products that are limited to simple organization management, the B2B organization management in WSO2 Private CIAM Cloud handles complex nesting.

Device flow support with WSO2 Identity Server

Device flow is an OAuth2.0 extension that expands the range of devices an organization can use within their overall digital customer experience solution to include devices with limited user input capabilities (such as smart TVs which do not have keyboards). With device flow support, users can leverage other devices, such as smartphones, to complete the login on the limited input device.

Considerations When You Mock APIs Inside of Kubernetes

Today it’s not unusual to see organizations having implemented mocking in their daily workflow, as mock APIs allow developers to speed up their development and not rely on external services. For those reasons and others, many engineers are looking to learn more about the mocked APIs and how they can best be implemented into their organization.

WSO2 Identity Server User Authentication in a Next.js Application

Next.js is an open source React web development framework built on top of Node.js. The Next.js framework is known for: With the help of the NextAuth.js library, I will explain how to authenticate a user in a Next.js application with WSO2 Identity Server. NextAuth is an open source authentication solution for Next.js applications. More information about NextAuth.js is available here.

The Complete Guide to API Tokens

The use of APIs has rapidly been on the rise over the last several years. In fact, data shows that nearly 90% of developers are using APIs and REST APIs in some capacity. APIs or application programming interfaces refer to functions that allow applications to access data and interact with external software components, operating systems, and microservices. Essentially, the main goal of an API is to enable multiple applications to communicate with one another as APIs.
Featured Post

How to innovate faster with API Management - Why API utilisation must improve to meet transformation demands

Without effective management and reuse, APIs will not deliver their digital transformation potential. There is an urgent need to make application programming interfaces (APIs) efficient and utilised more effectively. This need is being driven by the rapidly increased rate of digitisation that customers and business lines are demanding from CIOs and CTOs. APIs are a powerful tool that can be employed to deliver competitive advantage and market differentiation, the two biggest demands being placed on the technology team.

WSO2 Launches WSO2 Private CIAM Cloud to Deliver Best-in-Class CIAM Support for Both B2B and B2C Demands

WSO2 also delivers stronger analytics, typing biometric authentication, multi-attribute login, and added device support with today's releases of WSO2 Identity Server 6.0 and WSO2 Private CIAM Cloud.

An Overview of API Lifecycle Management

Understanding the stages of API lifecycle management offers an overhead look at application programming interfaces so you can find opportunities for improvement. Below, you will find the three major stages of an API lifecycle. Each section offers a closer look at the steps professionals often address when optimizing API strategy, functionality, access control, workflows, and other critical features.

How to Test Autoscaling in Kubernetes

In an ideal world, you want to have precisely the capacity to manage the requests of your users, from peak periods to off-peak hours. If you need three servers to attend to all the requests at peak periods and just one server at off-peak hours, running three servers all the time is going to drive up expenses, and running just one server all the time is going to mean that during peak periods, your systems will be overwhelmed and some clients will be denied service.

API-first development and the case for API mocking

One morning, you realize you have a great idea for an API. You discuss it with your team, then start building out the business case and technical requirements. Where do you go from there? You could write out the business requirements for the API and then code it. Or you could describe your API in a specification language, like OpenAPI, and use that definition to improve your team's understanding of the API and do some early testing. But are either of these the best solution?

Account Locking in WSO2 Identity Server #Identityin15

In this episode, we will be discussing all about account locking in the WSO2 Identity Server. There are two main types of Account Locking in the IS which are Admin-Initiated Account Locking and Account Locking due to Failed Login Attempts. In this session we will be discussing these types in depth and how you can enforce them.

Video: Cloud Native Traffic Replay

With the introduction of new application platforms like Kubernetes, oftentimes the DevOps tooling around it needs to evolve. Cloud Native technology is powerful but complex. This 5 minute demo video shows how Speedscale provides production simulation capabilities so you can check for resiliency, quality and scalability in your Kubernetes clusters. You can record data and traffic in production and replay sanitized traffic on the fly against a new cluster.

How To Use Saved Cohorts in Moesif

Saved Cohorts are the driving force behind many features in Moesif such as Dynamic Sampling, Behavioral Emails, and Governance. Saved Cohorts are dynamic lists of users (or companies) that match a defined criteria. Cohort notifications can enable your teams to be notified the minute users start experiencing problems. In this tutorial we’ll take a look at how to set up a simple Saved Cohort, enable notifications, and take a peek at the incredible features that take advantage of Saved Cohorts like Dynamic Sampling, Behavioral Emails, and Governance.

Fast Innovation for New Integrations, Microservices, and APIs

The rapid growth in the development and use of APIs shows no sign of slowing down, and the central role APIs play in digital business across industries continues to surge right along with that growth. One recent survey of IT leaders found that 98% consider APIs mission critical, with 81% currently working with microservices and 18% planning to do so soon. The exponential growth in APIs has been such that most software in use today either uses an API or is one.

Harnessing Artificial Intelligence In API Management

A decade ago, artificial intelligence seemed like a future dream. Something impossible to achieve in the next 10-15 years. But two years into the 22nd century, those visions are now a reality. Sure, we don’t have fully sentient computers yet. But, we’ve made tremendous improvements beyond what many would have predicted a few decades ago. Harnessing artificial intelligence in API management will be important for scaling and securing your business.

Introducing WSO2 Private CIAM Cloud and Identity Server 6.0

WSO2 Identity Server is an API-driven open source IAM product designed to help you build effective CIAM solutions. It is based on open standards such as SAML, OAuth, and OIDC with the deployment options of on-premise, cloud, and hybrid. It supports complex IAM requirements given its high extensibility. WSO2 Identity Server manages more than 1 billion identities worldwide.

How to set up a Microsoft SQL Server in DreamFactory

This video will show you how simple it is to set up a Microsoft SQL server using DreamFactory. Who we are: DreamFactory is an API generation solution for more than 20 databases and many other data sources. With DreamFactory you can connect to any data source and instantly access a full-featured, secure, and documented REST API for your projects. DreamFactory replaces months of API development and server-side integration work. Start your projects with reliable REST APIs from day one.

Managing Data as an Asset

Modern technology has enabled businesses to collect all manner of data. Managing data as an asset includes website interactions to drilled-down explanations of what makes a company’s strategy successful, this information informs initiatives, aids decision-making, improves business processes, and provides a way to measure success toward specific objectives. However, having enterprise data is not a strategy or a competitive advantage in and of itself.

What Is CI/CD?

The pace of the industry today is pressuring software developers to build, test, and release software more frequently than ever. To achieve this pace, teams have built two core processes into their workflow: Continuous Integration and Continuous Deployment. Continuous Integration and Continuous Deployment (CI/CD) is a subset of the DevOps workflow that automates application code management and its safe, predictable shipping. In this article, we’ll take a deep dive into CI/CD.

Building a Pricing Strategy for Your APIs

An API is a unique product. There is no presentable UI or outcome a developer can show and market similar to a regular product in the marketplace. The only way to perceive its usefulness is to spend time testing and understanding the value it brings. Given these unique conditions, monetizing an exposed API requires a different approach compared to monetizing other products. This post discusses how to build a pricing strategy for your APIs and which aspects you should consider.

Distributed Tracing on Kubernetes | Andrew Kew | QuadCorps | Kongcast Episode 20

In this episode of Kongcast, Viktor speaks with Andrew Kew, Director at QuadCorps and Sr. Field Engineer at Kong, about the pillars of observability, distributed tracing on Kubernetes, and tools that can help you get the most out of distributed tracing.

How to Use APIs to Streamline Processes and Increase Efficiency

If your business is using APIs and other technologies, chances are you don’t know how they can help your bottom line. But, don’t be surprised if your business uses these services to improve efficiency, streamline processes and reduce costs when it comes time to integrate them into your existing business model. Here are a few examples of how businesses can use APIs to streamline processes.

How to parse and forward API logs with Kong plugins

As more companies are undergoing digital transformation (resulting in a huge explosion of APIs and microservices), it’s of paramount importance to get all the necessary data points and feedback to provide the best experience for both users and developers. Kong Gateway is a lightweight API gateway that is built to be open and versatile. Regardless of the technology stack involved, Kong supports these monitoring or logging requirements through its extensive ecosystem of plugins.

Saved Cohorts: The What, Why, and How

Being able to group a set of users or companies based on their behaviors or traits can be extremely useful. In Moesif, we have a feature called Saved Cohorts which allows you to do exactly this. Saved Cohorts can help businesses power marketing campaigns and other sales initiatives, help engineers and customer success teams manage ongoing issues, and a host of other use cases.

Optimize Your API Gateway with Chaos Engineering

As engineers and architects, we automatically build resilience into platforms as far as possible. But what about the unknown failures? What about the unknown behavior of your platform? The philosopher, Socrates, once said “You don’t know what you don’t know”. What if I could tell you there is a way to turn these unknowns into knowns – a way to understand how your platform will behave to specific failure events…

Sponsored Post

Datadog & Speedscale: Improve Kubernetes App Performance

By combining traffic replay capabilities from Speedscale with observability from Datadog, SRE Teams can deploy with confidence. It makes sense to centralize your monitoring data into as few silos as possible. With this integration, Speedscale will push the results of various traffic replay conditions into Datadog so it can be combined with the other observability data. Being able to preview application performance by simulating production conditions allows better release decisions. Moreover, a baseline to compare production metrics can provide even earlier signals on degradation and scale problems. Speedscale joined the Datadog Marketplace so customers can shift-left the discovery of performance issues.

Evolution of API Technologies: From the Cloud Age and Beyond

We live in a digital economy where Application Programming Interfaces (APIs) are foundational elements for businesses to operate and grow. As rightly outlined by Gartner, APIs interconnect individual systems that contain data about people, businesses and things, enable transactions, and create new products/services and business models. The popularity of APIs has grown significantly in the last decade or so, but the history of APIs stretches back much further.

The Evolution of APIs: From the Cloud Age and Beyond (Part 2)

In our last blog post, we traced the evolution of APIs in the cloud age. The cloud age introduced the idea of an “API economy” — or the business practice of organizations exposing their digital services or information through the controlled use of APIs. While the API economy looks attractive today, we believe it will become even stronger in the future.

The Rise of APIs in Retail - Better Data, Better Business

Retail is a challenging industry. It is constantly evolving to reflect consumer preferences in product selection – but that is only part of it. As more people turn to online shopping, many retailers are using application programming interfaces (APIs) to remain competitive. Consumers have certain expectations of technology, so implementing digital transformation and APIs in retail has become less of an option and more of a requirement to attract and retain the modern customer.

How Stripe Engineered a Developer Paradise

In this article, we are going to explore why the Stripe developer experience is so passionately supported by thousands of developers globally. One of Stripe’s missions is to increase the GDP of the internet, and over the last decade, they’ve successfully executed 250 million API requests per day and over 91 billion requests per year through their APIs.

Setting up a Multi-Architecture Kubernetes Cluster

In the last post we covered the industry shift towards ARM machines for both local and production software engineering. Last time we learned how to create Docker images that would work on multiple architectures for dev machines. Now we want to take this portability and leverage it for cost savings in production. You may be able to transition some of your services into multi-architecture builds.

The Beginner's Guide to Developing APIs

In the data-driven world, APIs have earned a crucial spot in the space where business and tech collide. Everyone from software engineers to business owners can benefit from APIs. This post will serve as a beginner’s guide on APIs, highlighting how they work and the benefits they can provide to business operations.

What is an API Gateway?

An API gateway is a server that sits between your backend services and your users. It provides an abstraction layer that helps you manage the communication between clients and your services. API gateways are a single point of entry into a microservices application and they work like a reverse proxy: They receive API calls from clients, route them to the right microservices in the backend, and return aggregated responses to clients.

FIDO Passkeys With Asgardeo

In March 2022, FIDO Alliance and the W3C WebAuthn working group proposed a new version of the WebAuthn specification where they claim to resolve common usability issues with FIDO while ensuring a high level of security. This has started to gain significant attention in the identity domain during the past couple of months especially with the joint announcement from Google, Apple and Microsoft on their extended support for the FIDO passwordless standard.