Systems | Development | Analytics | API | Testing

October 2023

How APIs are Powering Digital Transformation for Energy and Utilities

Energy and utilities providers are currently facing more uncertainty than ever before. Volatile prices, geopolitical instability, new technologies and more demands for going green are threatening the future of the entire industry. As a result, their IT teams are under tremendous pressure to start powering digital transformation through productivity improvements, capital efficiencies and development of new revenue streams.

7 Tips for Creating a Successful API

Frequent deployment of APIs can quickly create a software system that is like an overgrown garden, riddled with weeds, bugs, failed integrations, and ill-fitting use cases. Overloaded API collections prevent changes without causing failures. More commonly, they limit the visibility needed to recognize opportunities for feature optimization. Creating a successful API can go a long way to ensuring your organization can avoid many of these problems.

How We Implemented Zero Trust in Choreo

In the past, enterprise software focused on protecting network access through on-premises firewalls and VPNs, working on the assumption that everything within the network was secure. However, today, as accessing data has extended beyond on-premises locations to cloud and hybrid networks, SaaS platforms require a security model that can address a broader range of attack vectors. Zero Trust security addresses this pressing need.

Contract Driven Development and Contract Testing via Specmatic

In software development, an API-first approach has emerged as a powerful methodology for building robust and interoperable systems. An API, or Application Programming Interface, acts as a set of rules and protocols that enables different software applications to communicate with each other. It defines how different software components should interact and exchange data.

How to Version REST APIs: A Comprehensive Guide

Versioning REST APIs is crucial for ensuring seamless interactions between software applications. In this tutorial, we’ll discuss how to version REST APIs, ensuring that developers can evolve their APIs without disrupting existing users. Here’s what you need to know about REST API versioning: Table of Contents.

Salesforce REST API Integration: A Step-by-Step Guide

Learn how to integrate Salesforce with a REST API in this step-by-step guide. Discover the advantages of Salesforce REST API integration, and explore the process of authentication, making API requests, and handling data sync. Find expert tips for successful integration, empowering you to optimize Salesforce for enhanced business operations.

Quick Look: Building a Modern API Platform: A 5-Min Mini-Demo with Kong Konnect | API Summit 2023

Quick Look: Building a Modern API Platform: A 5-Min Mini-Demo with Kong Konnect | API Summit 2023 In this session, Greg Peranich, Senior Solutions Engineer at Kong demonstrates how technology leaders can leverage Kong Konnect to build a world-class API lifecycle management platform. Greg covers topics such as managing distributed Kong Gateway instances, securing outbound calls to a third-party API, configuring a gateway in a declarative fashion, monitoring the health and performance of any service, route, or application, and much more.

The Economic Impact of APIs: API Monetization, AI, Web3, and Beyond

Whether ordering groceries online, checking your bank balance, or tracking a delivery, APIs are behind the scenes making it all possible. They're the backbone of the digital experiences that drive our interconnected global economy. You may know that. But beyond the convenient (and sometimes delightful) experiences APIs enable, how are APIs actually affecting the global economy and shaping the future course of business and technology? We wanted to know, so we found out.

API Gateway and Service Mesh: Bridging the Gap Between API Management and Zero-Trust Architecture

Discover how API management and service mesh can go hand in hand toward secured platforms Over the last ten years, Kongers have witnessed hundreds of companies adopting a full lifecycle API management platform and have been working with the people behind the scenes, the “API tribes.” We’ve also learned from the field that API tribes most often have to deal with heterogeneous platforms, infrastructures, and clouds.

Comparing Moesif and Apigee: A Deep Dive into API Monetization Features

In today’s digital age, APIs have become the backbone of many businesses, enabling seamless integration and communication between applications, platforms, and users. As the demand for APIs grows, so does the need for effective API management and monetization. In this post, we’ll compare two leading API platforms, Moesif and Apigee, focusing on their monetization features.

The 7 Steps To Building an API Ecosystem

API adoption is at an all-time high. According to research by Coleman Parkes Research, 88 percent of enterprises use them. With Application Programming Interface ecosystems, businesses can share their existing assets and capabilities with external parties. They can extend the value of these Application Programming Interfaces both internally and externally to share knowledge, tools and resources.

Call a PostgreSQL Stored Procedure from an API

The ability to call a PostgreSQL stored procedure from an API allows for rapid development in a secure way. Rather than writing database queries to interact with your data you can utilize an API that can be rapidly developed and reused many times. The reusability of APIs and using stored procedures means if you are scaling from a single backend application to hundreds your APIs will not change. Table of Contents.

API Security Fundamentals: Everything You Need to Know

You’ve probably heard of the Internet of Things (IoT); all those everyday objects that incorporate computing functions. For example, the IoT allows you to connect your phone to your refrigerator. This way, you can know exactly what to buy at the supermarket for that impromptu dinner that night. Perhaps you’re part of a DevOps team, using microservices and containers to build and deploy legacy and cloud-native applications quickly and iteratively.

Docs as Code: Screenshot Automation at Kong

Imagine this: You're documenting an unreleased feature, and your documentation requires screenshots. However, you're working in an internal environment that includes features you don't want to reveal to the public. What do you do? We faced this exact situation during the API Summit release when we needed to capture screenshots of the new Kong Konnect Plus dashboard while our internal environment also showcased Mesh Manager features.

5 Popular Developer Portals and the Business Features They Might be Missing

As APIs have become the centerpiece of online data exchange in the modern era, the need for documentation and communication between developers of these APIs and their users has become incredibly important. Effective developer communication can unlock massive potential, create new iterative success, and serve as a compounding conduit that improves the industry at large. Accordingly, developer portals have become exceptionally useful and important ways to share API documentation with API consumers.

Self-Serve and Sales-Led API Monetization - Unlocking Product Led Growth

There are as many monetization pitfalls as there are methods of monetizing APIs. As the market has shifted over the years, selling APIs and creating product userbases has become more important than ever. Today, we’re going to discuss a strategy that can lead to explosive growth – let’s talk self-service and product led growth.

How to Make a REST API

REST APIs have become the backbone of modern software applications, enabling seamless communication between systems and ensuring data consistency. In particular, REST APIs are useful for ETL (extract, transform, load) and data integration workflows. They make it easy to exchange information between various websites, databases, and SaaS (software as a service) applications.

Hacktoberfest #1 - Recognize, Celebrate and Connect open source Developers.

If you’ve ever wanted to contribute to open source, now is your chance! You can contribute to several Keploy projects participating this year’s Hacktoberfest. Anyone around the globe who desires to help drive the growth of open source and make positive contributions to an ever-growing community. All backgrounds and skill levels are encouraged to participate. Vaunt builds vibrant open-source communities by rewarding developers for contributions, celebrating achievements, and encouraging connections.

Governing GraphQL APIs with Kong Gateway

Modern software design relies heavily on distributed systems architecture, requiring all APIs to be robust and secure. GraphQL is no exception and is commonly served over HTTP, subjecting it to the same management concerns as any REST-based API. In fact, GraphQL’s dynamic client querying capabilities may lead to more complex and potent attack surfaces than traditional REST-based APIs.

How to Enforce API Usage Policies

One of the most difficult aspects of creating an API service for public consumption is the balance between developer control and user freedom. Ensuring that users can leverage an API to new heights requires a certain amount of freedom, both in modality of usage and in applicability of the use case. The security of underlying systems and the API itself relies on controlling this usage and ensuring a level of control for the greater good.

Become an API-first Company | API Summit 2023

Become an API-first Company | API Summit 2023 🚀 Navigating API-First Approaches & Innovations Safely and Effectively! Dive into an insightful session from API Summit 2023, where Augusto Marietti, CEO & Co-founder of Kong, along with João Mikos from SeatGeek, and Sanjay Modi from Comcast, unravels the intricacies of adopting an API-first approach and introduces Konnect, the world's first unified API platform!

APIs and Business Logic: What's the Connection?

APIs and business logic is an essential tool when planning API integration. Because the first steps to API integration include accommodating the customer experience and establishing your current technology level, your unique business logic is the key to understanding where your business is and how to move forward. It can also serve as a roadmap to building your own composable enterprise.

Simplifying Database Tests with DreamFactory

DreamFactory can effortlessly create secure internal REST APIs in a matter of minutes, and offers a comprehensive database testing solution. With DreamFactory, you can validate your databases with ease, ensuring they meet your application’s requirements and deliver impeccable performance. In this article we’ll cover how DreamFactory simplifies the database testing process. Here’s the key things to know about simplifying database tests with DreamFactory.

Oracle API Manager vs. IBM API Management: Which is Right For You?

Any organization that uses diverse applications and web services need a comprehensive way to manage its application programming interfaces (APIs). As two of the biggest names in technology, Oracle’s and IBM’s tools tend to stand out to people reviewing their options. Can Oracle API Manager or IBM API Management meet your needs while staying within your budget? The following review compares and contrasts the API solutions to help you make an informed decision.

Postman Tutorial: A Guide for Complete Beginners

Postman is one of the most sought-after tools when it comes to API testing. Whether you’re new or experienced, this tutorial simplifies API testing using Postman. We’ll cover the basics, explore testing techniques, and showcase implementable skills in this blog. This blog is derived from Pricilla Bilavendran’s workshop on Postman with The Test Tribe.

Kong Named Leader in Gartner Magic Quadrant for API Management for Fourth Consecutive Year

For the fourth year in a row year, we’re thrilled to announce that Kong has been recognized as a Leader in the Gartner Magic Quadrant for API Management. We believe this recognition reinforces our commitment to our customers, who rely on Kong’s unified cloud API platform to deliver fast, reliable, and secure digital experiences.

Hands-On Experience in API Performance Testing | What is API Testing | Vishal Parmar | #apitesting

In this hands-on video, Vishal Parmar guides you through the world of API Performance Testing. In today's dynamic IT landscape, API Testing has emerged as a crucial component of software validation. Vishal sheds light on the significance of API Testing, especially in scenarios where multiple vendors collaborate on a single product or solution.

Why Building a Platform May Not Be Your Best Bet-Exploring Five Critical Reasons

As the technology landscape continues to rapidly evolve, creating a platform that introduces the correct abstractions for software development and delivery has become an increasingly compelling proposition. But the pivotal question remains: is building what’s known as an internal developer platform (IDP) or digital platform in-house the right move for your organization? The choice isn't merely technical; it's strategic.

SmartBear: A Visionary in the 2023 Gartner Magic Quadrant

We are excited to announce SmartBear has been named a Visionary in the 2023 Magic Quadrant by Gartner for API Management. A Magic Quadrant is a tool that provides a graphical competitive positioning of technology providers to help you make smart investment decisions. The evaluation was based on specific criteria that analyzed the company’s overall completeness of vision and ability to execute.

How to set up a Microsoft SQL Server API in DreamFactory

This video will show you how simple it is to set up a Microsoft SQL server using DreamFactory. Who we are: DreamFactory is an API generation solution for more than 20 databases and many other data sources. With DreamFactory you can connect to any data source and instantly access a full-featured, secure, and documented REST API for your projects. DreamFactory replaces months of API development and server-side integration work. Start your projects with reliable REST APIs from day one.

EP4: Architects Take On Platform Engineering

Join us for another episode of the ‘Discovering the Architecture Middle Path’ podcast. In this episode, our hosts Sanjiva and Asanka explore platform engineering, breaking down the buzz around platforms and delving into the architectural aspects that make them strong and scalable. Drawing from their hands-on experience, they discuss the relationship between architecture and engineering within platforms, covering concepts like modularity, microservices, and event-driven design. They also touch on important factors such as security and scalability. Whether you're an aspiring architect or an experienced engineer, gain practical insights to build or refine your platforms for the future.

How to Test Web API | API Testing Tutorial | Veerkumar Patil | #webapi #apitesting #softwaretesting

In this instructive video, Veerkumar Patil, a seasoned IT professional demonstrates how to test web APIs. Veerkumar's expertise shines as he guides viewers through effectively testing web APIs, using practical tools and methodologies.

From Vision to Venture 01 - Josh Twist

From Vision to Venture is a Moesif podcast that highlights some of the biggest wins and challenges in the startup space today. Every episode, we'll talk to different founders to discover some of the strategies that they've used on their journey from being an early-stage startup to a little bit later stage. Whether you want to hear more about how to manage life as a startup founder or raise a round of investment, this is the podcast for you.

API Management vs. Integration Platform | A Complete Comparison

In this article, we will explore the differences between an API management vs. integration platform, and why understanding them is crucial for businesses seeking to optimize their data and service integrations. Here are the key differences between API management and integration platforms.

Common API Authentication Methods: Use Cases and Benefits

As businesses expand and gain visibility, it’s natural that their API attack surfaces become more exposed — increasing the risk of dangerous data breaches. Protecting cloud communications and securing data in transit should be your organization’s top priority. API authentication mechanisms help ensure that only valid users can access your application's features and services, and these mechanisms should be tailored to fit your specific needs.

Adaptive API Security

In a world filled with threats, how can we deploy APIs with confidence? In this talk, we'll review how biological immune systems solve the problem and dive into how similar concepts drive Salt Security's Kong Plugin. The issue is how to defend APIs against evolving adversaries without knowing in advance what their attacks will be...all while not over-alerting on false positives. Join us to learn about security standards, why AuthZ/AuthN aren't enough, and what we as professionals can do to enhance trust in an increasingly API driven world.

Zero Trust Network Access (ZTNA) vs VPNs

In today’s modern digital environment, more organizations are relying on remote work than ever before. While this shift has given companies unprecedented flexibility when it comes to deploying their workforce, it has also presented challenges in keeping their devices, operations, and personnel protected, especially in regard to API security. Without proper oversight, attackers can access your organization’s server by exploiting such security vulnerabilities.

OpenLogic by Perforce, In Collaboration With the Eclipse Foundation and Open Source Initiative, Launches the Next State of Open Source Survey

Perforce Software launches its latest survey on the usage of open source software. This survey marks the first year of collaboration with the Eclipse Foundation in addition to the Open Source Initiative (OSI), who is participating on the survey for a third year.

What Is an ESB and Its Alternatives?

An ESB (Enterprise Service Bus) allows you to integrate the disparate applications and services that run your organization. In this article, we take a closer look at what an ESB is and what alternatives exist. By connecting all these components through an ESB, you eliminate the labor-intensive task of custom-coding messy, point-to-point integrations. In this way, an ESB provides a safe, fast, and reliable backbone to your IT infrastructure.

Top Legacy System Migration Strategies

First things first what is a legacy system? A legacy system is any kind of outdated computer system or software used instead of newer, modern systems. Pagers, landlines, and telegraphs are all examples. As you might expect, there are a number of disadvantages of legacy systems. That’s why many companies, universities, and organizations around the world are starting the process of legacy system migration.

Common Types of Software Architecture

When referring to common types of software architecture, often people refer to the general blueprint or structure that software developers follow when building applications. Relying on common architectural styles makes it easier for project managers and programmers to make products efficiently. Development teams can choose software architecture patterns they know can offer the functionality they need.

Explore the New and Improved WSO2 Micro Integrator Runtime Versioning System With Choreo

Choreo now allows you to specify WSO2’s Micro Integrator runtime version and update level when deploying integrations. Previously, Choreo defaulted all deployments of WSO2 Micro Integrator projects to a specific runtime version and update level. With this improvement, developers can specify the exact runtime version and update level required for their integrations. This improvement simplifies the development and troubleshooting process for integration developers.

OpenID vs OAuth: Understanding API Security Protocols

When it comes to digital identity, OpenID and OAuth are two peas in a pod, but they have their differences. OpenID connects you to relying parties using a single sign-on, while OAuth grants access tokens so you can give apps limited access. They both make authentication simple, seamless, and secure. However, don't be fooled: behind the scenes, they're as different as night and day. OpenID is about logging you in, while OAuth is all about letting apps in.

Supercharge API Performance Testing with ReadyAPI

As the holiday season approaches, businesses worldwide are gearing up for the busiest and most lucrative time of the year. In today's digitally driven marketplace, the flawless performance of your APIs is crucial for maintaining and boosting business revenue during this time. As consumers increasingly rely on online shopping and mobile apps for their holiday purchases, any API-related glitches or slowdowns can lead to frustrated customers and abandoned transactions, resulting in lost sales.

Introducing Choreo API Chat: Transforming Your API Interactions With AI

We're delighted to unveil Choreo API Chat, Choreo's innovative approach to interacting with APIs, powered by Generative Pre-trained Transformer (GPT) 3.5 large language model (LLM) from Azure OpenAI. This allows users to try out APIs running or proxied via Choreo using natural language, serving as a complementary tool to traditional methods. It offers a convenient way to quickly try out endpoints without delving deeply into API specifications or crafting intricate JSON payloads.

API Testing Tutorial for Complete Beginners

API (Application Programming Interface) testing is a crucial skill for software professionals. Whether you’re new to testing or an experienced pro, this blog is your go-to resource. We’ve distilled valuable insights from The Test Tribe’s 4th Virtual Meetup on API Testing with Pricilia into an easy-to-understand blog guide. For the visual learner’s out there, you can watch the complete video below.

Introducing External Identity Provider Support for Choreo

Choreo is an internal developer platform where you can develop, deploy, and manage your cloud native applications with minimal effort. Authentication and authorization are essential to consider when restricting access to your application. Determining the legitimacy of the consumer of your cloud application is the main purpose of authentication. Authorization guarantees that the consumer has the necessary permissions to access your applications.

Amazon RDS vs. MySQL | How to Choose What is Best For You

In this article, we will compare Amazon RDS vs. MySQL, two database concepts widely used in the world of cloud computing and database management. The purpose of this comparison is to help you understand the key differences between these two concepts and assist you in making an informed decision about which one is best suited to your specific needs. Here are the key differences between Amazon RDS and MySQL: Table of Contents Need an API?

The Top 10 Best API Integration Tools For Developers

API integration has proved to be an essential companion for developers in the constantly advancing world of software development. API tools help blend systems and applications as they interact and engage with each other. Despite that, API connections can become complex at times. How do we choose the right API integration tool? What factors should be considered while selecting the API integration tool to work with?

Troubleshooting an Intermittent Failure in CI Tests on ARM64

The Kong Gateway CI was failing intermittently (about once every 100 runs) on the ARM64 platform with a strange error: “attempt to perform arithmetic on local 'i' (a function value)”. The variable i in the context is an integer but at runtime, it was sometimes a function value. This is caused by an error in the LuaJIT ARM64 JIT compiler. We’ve investigated and found the issue and the fix is merged in the LuaJIT upstream. This document describes how we fixed the error.

How to Connect to a MySQL Database with JavaScript in a Few Steps

The DreamFactory REST API enables database connections using a wide variety of front end scenarios. This simple sample app demonstrates how DreamFactory easily can be used to connect to a MySQL database with JavaScript. It’s a simple address book, where contacts can be created, shown, updated, deleted and grouped: basically, CRUD operations. The Address Book is a very simple one page app based on plain JavaScript and jQuery.

Most Common API Issues & How to Fix Them

APIs have become a crucial connection in the space where business and technology meet. According to MarketsandMarkets, the API management market is projected to be worth $5.1 billion by 2023. It’s clear that API use is growing and that this growth will continue well into the future. While APIs offer plenty of benefits, some common API issues tend to arise, regardless of industry.

What's New in Kong Ingress Controller 2.12?

API Summit 2023 has just concluded, with awesome announcements including the launch of Kong Mesh in Konnect, and Dedicated Cloud Gateways. In addition to launching new capabilities, we also ensured that our existing products continue to grow and deliver value. With that in mind, I’m pleased to announce the immediate availability of Kong Ingress Controller 2.12.

Proxy-Wasm: It's WebAssembly for Proxies

Picture this: You're building the next generation of microservices architecture in your organization. The orchestration is in place, containers are humming, and you've chosen Kong Gateway (naturally) to manage the APIs, ensuring smooth communication. But then, you hit a snag. You need a custom filter not part of the standard library of plugins, or you envision a unique way to manipulate, observe, or control the traffic.

Introducing Semantic Version-Based Intelligent Routing

One of the main challenges API producers face is making improvements and enhancements to their APIs without getting their clients to upgrade API versions (i.e., change their applications). We're excited to introduce semantic version-based intelligent routing in Choreo, making API consumption easier than ever. This feature groups APIs into their major versions, and the corresponding URLs are simplified to include only the major version number.