The recently published “OWASP API security top 10” report analyzes the anti-patterns that lead to vulnerabilities and security risks in APIs. In this 10 part series, we introduce these API anti-patterns. Every API professional should know about these anti-patterns. API
The 10 most critical API security risks – Part 1: Broken Object-Level Authorization
The recently published “OWASP API security top 10” report analyzes the anti-patterns that lead to vulnerabilities and security risks in APIs. In this 10 part series, we introduce these API anti-patterns. Every API professional should know about these anti-patterns. API
New Course on OpenID Connect & JWT
Many of my 7100 students of the OAuth course have asked me to create a new course on OpenID Connect & JWT . And I completely understand why. Because as an API professional in 2020, you simply need to know
API Days Australia Melbourne 2019
Keynote: “Building Digital Ecosystems with APIs” API Days Australia Melbourne 2019 September 19th, 2019Melbourne Convention & Exhibition Centre1 Convention Centre Pl, South Wharf VIC 3006, Australia
gRPC API Style for high-performance APIs
Researching architectural styles for APIs? gRPC is an API style that follows the remote procedure pattern and allows for high-performance implementations. It follows the remote procedure pattern. If you are researching which architectural style to apply, and you start on
REST APIs with HATEOAS
The REST constraints tell us to design APIs according to HATEAOS (Hypertext as the Engine of Application State). The Richardson Maturity Model rates APIs according to the fulfillment of these constraints and assigns the highest rating (level 3) to the
Richardson Maturity Model – classify REST-like APIs
Not every service that is exposed over HTTP is compliant with the REST constraints. Sometimes one can find services, which are advertised as being RESTful, but in reality, they follow the RPC style. In fact, there may even be a
The API Mandate – Install API Thinking at your Company
Jeff Bezos, Amazon founder and CEO, wrote the following memo to his employees around 2002. It got known as the “Bezos API Mandate” or “Amazon’s API Mandate”.
Value Proposition of Alexa for Skill Developers
If a voice platform shall be successful, it needs to offer its users a large choice of voice apps. All users shall be able to customize their Alexa experience with the particular Skills they need. The platform provider cannot possibly
Alexa Ecosystem
Alexa is not a monolithic app delivered by Amazon, but rather an ecosystem of highly specialized voice apps (or Skills) that are all available on the Alexa platform. There are clear roles for software providers, hardware providers and Amazon as