Most people familiar with APIs know the role of an API Gateway, which is typically used to secure access to APIs and provide capabilities such as threat protection, rate limiting, authentication, and authorization. The Layer7 API Gateway does all of this and much, much more. This series of posts will highlight scenarios where the Layer7 API Gateway has…
Category: For Developers
Enriching and Externalizing Gateway Metrics to Splunk
Overview Gateway metrics are a critical piece of intel to determine the health of Services and traffic throughput on an API Gateway. Using Layer7 API Management as an example, there are a few ways we can obtain this information: Policy Manager: Dashboard, PAPIM (Precision API Monitoring), sending this information to a monitoring solution via Gateway Metrics Tactical Assertion…
DevOps: REST API Execution Through Bash Shell Scripting III
A Simple Framework (Experiences) This is the third and last part of the paper proposing a framework that enables DevOps teams to issue REST API calls via bash shell scripts. This part shares some experiences/lessons learned from real world applications. Experiences It would be nice if API publishers simply provided an API client SDK in shell scripts. While…
DevOps: REST API Execution Through Bash Shell Scripting II
A Simple Framework (Extension) This is the second part of the paper proposing a framework that enables DevOps teams to issue REST API calls via bash shell scripts. This part discusses the extension beyond the core of the proposed framework. The third part shares some lessons learned from real world applications. The Basics The basic set of operations…
DevOps: REST API Execution Through Bash Shell Scripting
A Simple Framework: Core This is the first part of a paper proposing a framework that enables DevOps teams to issue REST API calls via bash shell scripts. The second part of the paper discusses the extension beyond the core of the proposed framework. The third part shares some experiences learned from real world applications. Introduction JSON-based REST…
A Guide to REST and API Design
API Academy Learn how to use REST to build developer-friendly, sustainable APIs The Representational State Transfer (REST) architectural style is extremely valuable to organizations that want to create APIs as a way to leverage their existing IT resources in new Web and mobile apps. By applying REST design principles to a protocol, such as HTTP, developers can build…
A How-to Guide to OAuth & API Security
API Academy Make OAuth implementation simple for your organization OAuth is an emerging Web standard that lets users grant third-party clients restricted access to resources they own. In the past, it was common to ask a user to share username and password information with the client. OAuth authentication is more secure as it allows the user to grant…
5 OAuth Essentials for API Access Control
API Academy Create a framework to address the complex challenges associated with implementing OAuth There are a number of important access-related challenges for API publishers. However, deploying OAuth as an authorization mechanism for enterprise APIs raises challenges around scalability, correct usage and integration. To make matters worse, OAuth is not supported by existing infrastructure and is poorly understood…
Protecting Your APIs Against Attack & Hijack
API Academy Secure enterprise APIs for mobile, cloud and open Web It is a mistake to think we can secure APIs using the same methods and technologies with which we secured the conventional, browser-centric Web. While it is true that APIs share many of the same threats that plague the Web, APIs are fundamentally different from Web sites…
API Strategy & Architecture: A Coordinated Approach
API Academy Discover how to align API architecture with your organization’s business goals The rise of the application programming interface (API) represents a great business opportunity and an equal technical challenge. Business goals and API implementation must be aligned in order to get the most out of your APIs and get your digital business initiatives successfully into the…