To become useful, the API architecture needs to be put into practice. This is why this book covers an API methodology for design and development. An API methodology provides practical guidelines and explains how to develop an API architecture into
Why do we need an API Architecture?
APIs are simple, small and approachable – Why do they require an API Architecture? It is very hard to move the pillar of a bridge, which is made of steel and concrete. Such changes are difficult, costly and time-intensive. This
How to build APIs efficiently?
I will get back to APIs in a moment. For now, let us assume that we were in the car manufacturing business and we would like to build a new car … What would we have to do? We find
What is API Architecture? – More than you think.
What most API design books focus on is the use of HTTP methods, URL design, HTTP status codes, HTTP headers and the structure of the resources in the HTTP body. However, this is actually the smallest challenge when building APIs.
Which Actors are involved in OAuth Flows?
OAuth is designed for distributed systems that consist of several actors with distinct roles. Just like the actors in a movie play specific roles so the story can evolve, each actor in an OAuth flow takes on a specific role
OAuth 2.0 Usage
In a previous post, we have introduced OAuth as a framework for API Security. But how is OAuth used and which solutions can be enabled by it? In fact, most of OAuth is happening under the hood of modern cloud, mobile,
What is OAuth 2?
If you are working with APIs I am sure you have heard about OAuth 2. It is used for securing access to APIs. OAuth 2 is a standard for delegating authorization for accessing resources via HTTP. OAuth 2 offers a
The Password Anti Pattern
People have gotten a bit sensitive about internet security and privacy. “Mobile apps, web-APIs, and Cloud Services – yes, I like and use them, but … is my data really secure there? Can I control what happens to my data