Systems | Development | Analytics | API | Testing

August 2023

SAP HANA APIs with DreamFactory

The ability to process and analyze information in real-time is more than just an advantage—it’s a necessity. SAP HANA, with its in-memory technology, has emerged as a leader in this domain, offering businesses unparalleled speed and agility in data analytics. However, as powerful as SAP HANA is, maximizing its potential often requires seamless integration with other platforms and applications. Enter DreamFactory: an open-source API generation platform designed to connect the dots.

How to Automate Your Test Management in Jira

With demands on software development teams to work faster than ever before, efficiency is King. Many teams are implementing test automation to boost productivity, as manual testing can be time-consuming and error prone. Test automation revolutionizes the testing process. It enables you to automatically publish test results from various automation frameworks directly into your test management environment.

What Is API Gateway Authentication?

API gateway authentication is one of the key functions of an API gateway. In carrying out this function, the API gateway manages authentication and authorization for the entire group of APIs that sit behind it. In this way, API gateway authentication safeguards your systems and information against unwanted access, data breaches, hacks, and mistakes. While the basic premise of API gateway authentication is easy enough to grasp, this guide offers a more nuanced understanding of the concept.

What is an API Ecosystem?

An API ecosystem refers to the interconnected network of applications, services, and APIs that collaborate to enable data exchange, functionality, and interactions between various software components. An API connects all the software developments so they can work together. Developers can connect apps that don’t normally work together, allowing for combined strengths and opportunities to close gaps in product capabilities. This is the basis for what’s called the “API ecosystem.”

Exploring Event-Driven Architecture: A Beginner's Guide for Cloud Native Developers

Classical request/response architecture is driven by procedure calls, where a caller waits for the call to finish, and the call continues until the work is done. Each incoming call is broken into smaller procedure calls, which may in turn call other procedures. In contrast, event-driven architecture (EDA) is driven by events such as user actions, sensor outputs, or messages from other programs/threads, which determines the execution flow.

Discover, Test, and Succeed: SwaggerHub Explore Meets SwaggerHub Portal

API documentation is the cornerstone of any successful API-driven project. It serves as a critical reference point for developers and consumers to understand how an API works, its endpoints, request/response formats, and more. While having comprehensive documentation is essential, what truly sets developers apart is the ability to seamlessly explore and test these APIs within the context of their documentation.

EP3: Unifying the Landscape with a Deep Dive into APIs, Services, and Seamless Communication

In this episode, we explore the complex interplay between APIs and Services, including their distinct versions and life cycles. We clarify the differences between managed or business APIs and service endpoints. The discussion also touches on domain, experience, and utility APIs, direction-based communication, gateway necessities, and the use of eBPF+MTLS as a minimal observer without a sidecar. Join us for a concise yet insightful look at these essential architectural components.

How to Streamline API Development with Consistent API Controls Across Teams

This post is part of a series on becoming a secure API-first company. For a deeper dive, check out the eBook Leading Digital Transformation: Best Practices for Becoming a Secure API-First Company. The growth of APIs isn’t just rapid — it’s a seismic shift. Industry insiders say they plan to introduce more APIs in the next five years than all the APIs they’ve created up until today. And this impending surge will place a serious burden on mission-critical API infrastructure.

What is API Sandbox? Definition, Examples, Key Components, Benefits

Application programming interfaces (APIs) serve as the backbone of today’s digital economy. They connect applications and web services with each other to exchange information and deliver thousands of digital experiences to users every day. With such significance, APIs can’t afford to be buggy, and software testers must frequently test them to identify and address potential issues. However, there’s a catch. Sometimes an API is not fully developed, or is simply too expensive to access.

What's New in Kong Ingress Controller 2.11?

Since our last Kong Ingress Controller release, we’ve been working hard, and today we’re pleased to announce the immediate availability of Kong Ingress Controller 2.11. KIC 2.11’s standout feature is “last known good configuration”, which allows you to scale your data planes out even if you have a broken configuration on your Kubernetes API server. That’s a strange sentence to write, but it happens more than you’d think.

Top 5 API Integration Tools For 2023

API integration allows different software systems to connect with each other and exchange data seamlessly, and this process is literally the backbone of our digital world. While it is entirely possible to perform API integration manually, using dedicated API integration tools offer so many advantages to make this process more efficient, reliable, and manageable.

New Insights into Federated API Gateways in Gartner Hype Cycle for APIs, 2023

Seeking greater insights into the role of federated API gateways? A good place to start is the recently published Gartner® Hype Cycle for APIs, 2023 , which highlights federated API gateways as a technology at the “emerging” maturity stage with a “high” benefit rating.

GraphQL from the Ground Up

Building APIs is a craft. Your API product must be stable, accurate, well documented, performant, and meet the informational demands of your clients — no small task. In this series, we’ll take a close look at GraphQL, a trending API technology that aims to help you deliver efficient and capable APIs. GraphQL’s unique and nuanced view of the client-server relationship offers interesting benefits for API delivery.

Rethinking API Development: DreamFactory's Pioneering Approach to API Generation

APIs have come to dominate the software landscape, acting as the connectors and communicators between disparate systems. Traditionally, the world of APIs has been dominated by API management tools, platforms that focus on overseeing, monitoring, and securing APIs. But what if we’ve been approaching APIs from a slightly skewed angle? Here’s the key things to know about DreamFactory’s approach to API Generation: Table of Contents.

Pricing Strategies for API Products

APIs and their integrations are paramount for the inner and outer workings of SaaS organizations. As such, pricing strategies for API products have taken center stage for businesses as a crucial determinant of success. APIs have become the linchpin of modern software development, enabling applications to communicate, share data, and provide enhanced functionality.

What is Loose Coupling in REST APIs?

Loose coupling in REST APIs is a fundamental principle in software design that advocates for the independence of components within a design, where alterations to one component have minimal impact on the functioning of others. The allure of this approach lies in its promise of flexibility, reusability, and adaptability, especially when incorporating, replacing, or modifying components. Here’s the key things to know about loose coupling in REST APIs: Table of Contents.

What is Idempotency?

Idempotent operations produce the same result even when the operation is repeated many times. The result of the 2nd, 3rd, and 1,000th repeat of the operation will return exactly the same result as the 1st time. In this post, we will demystify the concept of idempotency—a fundamental property that ensures consistency, predictability, and reliability in APIs and distributed systems.

Using EDIFACT with Choreo

Electronic data interchange (EDI) revolutionizes business communication by enabling standardized structured data exchange between enterprises. Electronic data interchange for administration, commerce, and transport (EDIFACT) stands out as a widely adopted international EDI standard developed by the United Nations. In B2B integration scenarios, companies often use different data formats, such as EDIFACT, JSON, XML, etc.

Asynchronous APIs: What Are the Benefits?

If you have worked mainly with REST APIs, there’s a chance you might not be acquainted with asynchronous APIs and their protocols, such as WebSockets, Kafka, and AMQP. Asynchronous APIs enable you to manage multiple requests simultaneously to communicate between services effectively. Many similar tasks can be performed using both these APIs; however, some use cases can be managed better with a particular API. Let’s delve deeper into the difference between synchronous and asynchronous APIs.

WebAssembly in Kong Gateway 3.4

Perhaps the most exciting feature introduced in Kong Gateway in recent years is the addition of WebAssembly support. WebAssembly (or Wasm) was originally developed to bring additional languages beyond JavaScript into the browser. However, nothing stops it from being used in the backend as well! With WebAssembly in Kong Gateway, you’ll be able to build and deploy Wasm filters using languages such as Rust and Go, and configure filter chains to operate on your Kong routes and services.

The Future of API Gateways on Kubernetes #WordsUnplugged

In this #WordsUnplugged video, we examine how API gateways have evolved, how traditional API gateways fall short in supporting Kubernetes cloud native environments, today's API gateway requirements, why Envoy is the best standard on which to build next-generation API gateways, and the future of API management on #kubernetes.

API Exploration for Testers

As API testing continues to evolve, testers face challenges that prohibit comprehensive test coverage and hinders their ability to deliver high quality software. API exploration can kickstart a testers API journey before they embark on advanced testing tools for APIs. This video is designed to equip testers with in-depth knowledge and practical techniques for API exploration, empowering them to enhance their testing efforts and uncover the full potential of APIs.

Reduce API Security Risks with Standardized Governance

APIs serve as the foundation for how software systems and services communicate and exchange data. But unmanaged and unsecured APIs can open up massive vulnerabilities that lead to disastrous security breaches and data leaks without proper governance. With API-related attacks increasing — and set to increase 996% by 2030 — unmanaged APIs are a very real security threat. How do you implement reliable API security without slowing down innovation or blowing up costs?

How to Schedule API Calls with Scripts and Cron

Running an API call as a scheduled task is a common need for any business. Whether you need to synchronize data between two endpoints or regularly pull information from one system to another, it makes sense to automate the process rather than remembering to do it manually every time. As sysadmins everywhere know — you can schedule API calls with Cron.

Building APIs for Deltek Costpoint | A Guide

An Enterprise Resource Planning (ERP) system is critical to supporting core business processes within large organizations. The ERP establishes a consolidated view of multiple systems including but not limited to inventory, sales data, manufacturing platforms, HR systems, CRM and many more. Most ERPs will seek to satisfy a particular industry need.

eCommerce Load Testing (Step 3): Build the Environment

In this webinar clip from "Ensuring performance: How major retailers leverage user traffic to validate code changes", Speedscale Co-founder, Nate Lee, explains what to consider when building the environment, including backend dependencies and data. He covers how service mocking can help companies test at a higher velocity in today's complex development environments.

Replicating Traffic: Use Cases & Benefits

In this webinar clip from "Ensuring performance: How major retailers leverage user traffic to validate code changes", Speedscale Co-founder, Nate Lee, talks about why traffic-based testing (unlike manually writing script tests) can help companies move faster and test at the speed of development. He covers the top use cases and benefits of leveraging traffic as the new way to test.

Improving Day-2 Operations with Kong Gateway

Installing and configuring Kong Gateway is just the beginning. Once you’re in production there’s ongoing effort to keep your API Gateway online and make it’s configuration match what your business needs. Our recent Kong Gateway 3.4 and Kong Ingress Controller 2.11 releases are focused on operator efficiency, and contain a host of features that will make your life easier. Join Veena and Michael as they walk you through some common failure modes of Kong Gateway and how our latest release helps you keep your API Gateway processing traffic 24/7.

eCommerce Load Testing (Step 2): Capture Traffic

In this webinar clip from "Ensuring performance: How major retailers leverage user traffic to validate code changes", Speedscale Co-founder, Nate Lee, explains what comes next after selecting the business-critical APIs to test first: capturing traffic. Capturing traffic for the service can be done through tools like Speedscale, GoReplay, VCR, K6, and JMeter.

Kong Gateway 3.4 for OSS: Bring Your Own Language with WebAssembly!

The Kong Gateway 3.4 for Open Source (OSS) release is massive for our community users. Notably, this release introduces support for Web Assembly (Wasm), bringing a new level of extensibility and customization to Kong Gateway. Read on to learn more about the new capabilities in Kong Gateway 3.4 for OSS.

Kong Gateway 3.4 for Kong Enterprise and Kong Konnect

We’re delighted to announce the release of Kong Gateway 3.4 for Kong Enterprise and Kong Konnect, featuring significant enhancements, such as secrets rotation support in secrets management, expanded plugin support in consumer groups, and more. The highlight of this update is the designation of Kong Enterprise 3.4 as a Long Term Support (LTS) release. Starting now, any customer running Kong Enterprise version 3.4.x.x will receive technical support for three years — until 2026.

What Are API Keys and How Are They Used?

Application programming interface keys are an essential part of using APIs. But what are API keys, exactly? API keys are authentication tokens in the form of unique strings of characters that allow you to access the data or web services an API offers. They act as a form of user authorization, proving that you are authorized to make requests to the API. In this article, we will discuss how API keys work and how you can use them to access the data offered by APIs.

Ensuring performance: How major retailers leverage user traffic to validate code changes

As featured on CMG.org: Software development and testing is ultimately all in preparation for go-live. But what if you could predict how your go-live could go wrong? In this webinar, learn how traffic-based tests and mocks can accurately simulate peak load conditions, ensure performance, and increase your top line revenue.

API Automation: Do More with Less with this Key to Digital Transformation

Organizations today are looking to do more with less. The solution for many? Digital transformation. While digital transformation isn’t a new concept, the benefits of boosting efficiency, controlling costs, and delivering better customer experiences are obvious in today’s topsy-turvy economic conditions. Digital transformation often involves making the transition from legacy monoliths to modern cloud native microservices-based architectures.

What is WSDL in SOAP | A Comprehensive Guide

Web Services Description Language (WSDL) and Simple Object Access Protocol (SOAP) are integral to the world of web services. But what is WSDL in SOAP? In a nutshell, WSDL, an XML-based language, defines how to communicate using SOAP, outlining the operations and data required. This guide offers a deeper dive into these pivotal technologies, unraveling their functionalities, importance, and challenges. Here’s the key things to know about WSDL in SOAP: Table of Contents.

OWASP API Security Top 10: Mitigating Risks with Kong

The Open Web Application Security Project (OWASP for short) is a not-for-profit entity devoted to improving the security of software. Founded in 2001, OWASP is a global organization that supports thousands of volunteers globally to produce freely-available articles, documentation, tutorials, and tooling. OWASP is best known for its "Top 10" lists, which represent a broad consensus about the most critical security risks to web applications.

Unlocking the Power of Programmable Data Planes in Kubernetes with eBPF #WordsUnplugged

In a recent article, Lakmal Warusawithana, Senior Director for Cloud Architecture at WSO2, wrote how programmable data planes offer dynamic control for cloud native applications and how technologies like the extended Berkeley Packet Filter (eBPF) and Kubernetes provide an abstraction to improve flexibility, scalability, and performance. In this WordsUnplugged episode, Lakmal, and Kanchana Wickremasinghe, VP and GM for Choreo at WSO2, sit down to talk about eBPF and its role in creating effective programmable data planes in Kubernetes. They also discuss benefits, challenges, best practices, as well as future trends and opportunities.

Celebrating 18 Years of Innovation: Unveiling 18 Fascinating Facts About WSO2

Today, we raise our virtual glasses to toast the 18th anniversary of WSO2 – a company that has redefined the realms of software development and innovation. From its humble beginnings to becoming a global force, WSO2 has stood the test of time, consistently delivering game-changing products that drive success for countless organizations across the world. So, join us as we take a captivating journey through WSO2's milestones, uncovering 18 fascinating facts!

Transforming User Experiences By Leveraging CIAM

More than ever, companies are competing based on their ability to deliver exceptional user experiences. It can take less than 60 seconds for a busy consumer to try one company’s website, get frustrated, and jump to the site of a competitor. And customers may stop using a business altogether if they discover that it has given their personal data to some third party without permission. Such flawed digital experiences can quickly compromise brand loyalty and cut revenues in the process.

Cloud-side vs. Client-side Testing: What's Right for Your Project?

Most developers are familiar with running Selenium or Appium tests on their local machine (or sending them to a local Appium server). While these capabilities are essential early on, many organizations need help scaling this approach. Building and maintaining internal device labs and infrastructure can quickly become a nightmare. Here, you'll learn about the differences between client-side and cloud-side tests and how to choose the right option for your project.

Azure SQL vs MySQL: What are the Differences?

Here we’ll review Azure SQL vs MySQL, and what their differences are. Databases have been around for ages. From ancient paper based records to modern computerized systems, they essentially serve one purpose, which is to enable data storage in a way that is structured, permanent and easily retrievable or referenced, while maintaining its integrity. Here’s the key things to know about picking Azure SQL vs MySQL: Table of Contents.

Creating a Firebird API in Minutes with DreamFactory

Handwriting code for database APIs can be a time consuming and expensive process that often exposes organizations to a variety of risks relating to quality, consistency, and developer effort. DreamFactory specialises in REST API generation for a range of databases that gives you the ability to generate a secure, fully documented API in minutes.

Creating a Couchbase API in Minutes with DreamFactory

Handwriting code for database APIs can be a time consuming and expensive process that often exposes organizations to a variety of risks relating to quality, consistency, and developer effort. DreamFactory specializes in REST API generation for a range of databases that gives you the ability to generate a secure, fully documented API in minutes.

Creating a Cassandra DB API in Minutes with DreamFactory

Handwriting code for database APIs can be a time consuming and expensive process that often exposes organizations to a variety of risks relating to quality, consistency, and developer effort. DreamFactory specializes in REST API generation for a range of databases that gives you the ability to generate a secure, fully documented API in minutes.

Balancing Your Budget with Excellence

Regardless of industry, companies have been undergoing significant financial struggles. It’s led to supply chain disruptions, labor shortages, and increased operational costs. The strain of inflationary pressures, rising interest rates, and geopolitical uncertainties haven’t helped corporate balance sheets, either. As businesses strive to adapt to rapidly evolving consumer demands and digital transformation, they also face fierce competition, which has compressed profit margins.

How to Turn Any SOAP Web Service into a REST API

There are two types of remote web services: REST APIs and SOAP APIs If you want to wrap a SOAP API and make it easier to work with through the use of REST endpoints, this simple tutorial will enable you to achieve that goal. With this process, you’ll be able to make a request with JSON to the API and receive a response in JSON instead of a long-winded XML format.

ESB vs. Microservices: Understanding Key Differences

We’re delving into ESB vs. Microservices. The Enterprise Service Bus (ESB) has reigned for more than a decade as the preferred method for connecting monolithic business applications. However, with digital transformation and cloud-services rising to the forefront – forethinking enterprises are racing to achieve greater agility.

REST API Principles | A Comprehensive Overview

REST APIs are the basis of all interactions between different applications. Many companies and organizations today offer APIs to interact with their applications. REST APIs allow third-party application developers to perform operations such as transmitting or accessing data from one application to another. This is called a public API. This means that this API is intended for interaction with third-party apps.

Use ChatGPT to Develop a SOAP/XML Custom Kong Konnect Plugin

Today, APIs are based on modern communication patterns: REST, GraphQL, or gRPC. But two decades ago, the majority of Web Services were developed with SOAP/XML. In this blog, we’ll explain how Kong Konnect can manage SOAP/XML Web Services by creating custom plugins and by using ChatGPT. We’ll cover using ChatGPT to develop a Lua custom plugin and how to deploy and test a SOAP/XML custom plugin on Kong Konnect and Kong Enterprise.

From Limitations to Liberation: Unveiling API Potential Through Documentation and Exploration

In today's rapidly evolving technological landscape, APIs are the backbone of seamless integration and innovation across various software platforms. As businesses and developers strive to create interconnected and efficient applications, having comprehensive and value-driven API documentation and API exploration tools within the same platform is indispensable.

Driving Better Developer Experience with SwaggerHub Portal

SmartBear is excited to announce the release of SwaggerHub Portal, a feature of SwaggerHub allowing you to customize consumer-facing documentation for your APIs to maximize API discoverability. With its intuitive interface, you can easily create onboarding guides, reference documentation, and other materials that help developers both understand and integrate your APIs into their applications. With Portal, you can easily sync your API designs from SwaggerHub with zero context switching.