All API & Microservices Content

API Design 203: The USE Paradigm

Prioritize usability, scalability and evolvability in API design To work effectively, a Web API must display a range of specific software qualities. In this lesson, we outline what we call the “USE Paradigm†– a principle of API design, which states that interface designers should prioritize three particularly important software qualities: usability, scalability and evolvability. […]

TechTalk: Common OAuth Security Mistakes and Threat Mitigations

With vulnerabilities recently surfacing in the OAuth implementations of popular service providers like Yammer, Instagram and Facebook, it’s hard to blame anyone for getting the impression that there are fundamental security flaws in the OAuth protocol. Francois Lascelles, Chief Architect at Layer7, answered OAuth questions live, discussed the common security mistakes made in OAuth implementations […]

API Management 301: OAuth-Based Access Control

Learn how OAuth provides standard patterns upon which you can deliver API access control In API Management Lesson 201: API Security, we examine typical areas of API vulnerability and share best practices for addressing these vulnerabilities – including the use of OAuth as an access control mechanism. In this lesson, we describe how OAuth provides standard […]

API Management 201: API Security

Identify typical areas of API vulnerability and learn best practices for securing APIs In Lesson 103: Choosing a Solution, we discuss the importance of considering functional and operational security characteristics when choosing an API Management solution. Regardless of the solution, understanding the risk profile of APIs is vital to protecting an API against attack. In this […]

API Design 303: Pagination

Minimize response times for requests and improve the app-user experience Pagination is a ubiquitous method for handling large datasets and responses in the browser-based Web but developers of API-based apps also turn to pagination in order to minimize response times for requests and generally improve the end-user experience. In this lesson, we will explore some […]

API Strategy 202: How to Drive Business Value Through APIs

Discover five ways you can bring value to your business through APIs In Lesson 102: The Business Value of APIs, we provided an overview of the key business drivers behind API programs. In this lesson, we take a deeper dive into five ways you can bring value to your business through APIs. Specifically, this lesson explores […]

API Management 102: Architectural Components

To architect an effective API Management infrastructure, it is necessary to adopt and deploy some new technology components. In this lesson, we look into specific requirements and features associated with the components of an effective API Management architecture, including security, performance, data transformation and developer management. In Lesson 101: API Management Basics, we give an overview […]

API Design 202: Architectural Layers

No matter what API design style you choose, there are certain key qualities you will want your interface to have. Designing API architecture able to encompass all these qualities can be challenging. In this lesson, we outline a layered architectural style that simplifies the process of implementing a full-functioned Web API design. For a Web […]

API Management 103: Choosing a Solution

In Lesson 102: Architectural Components, we explain the key technology components required for a full-featured API Management solution. There are various solutions currently on the market, a number of which meet these basic requirements. In this lesson, we provide more practical advice on how to choose between specific solutions. A large enterprise with extensive IT resources […]