Implement application programming interface (API) usability, security, availability, reliability, and scalability to extend your company’s market and potentially generate revenue. Businesses know they need to extend their markets into the digital world, and expose internal data to the Internet. This book shows how stakeholders within an organization can make it a successful journey. Stakeholder needs are not identical and departments experience difficulties discussing requirements with each other due to their different fundamental understanding of the process. The goal of this book is to introduce a common language for all business groups—developers, security experts, architects, product managers—around APIs and provide an overview of all aspects that need to be considered when exposing internal data. Most of the content in this book is based on feedback from real-world enterprise customer questions, challenges, and business scenarios. Practical guidance is provided on the business value of APIs, the general requirements to know, and how to undertake an audience-based implementation. You will learn how to protect access to data, as well as API error handling, documentation, management, integration, and more. **What You’ll Learn** * Know the types of APIs and their business and technical requirements * The main benefits of APIs, including business value, loose coupling, and frequent updates * Protect access to APIs through role-based access, attribute-based access, and rate limiting * Distinguish between OAuth and OpenID Connect, and know how they both work * Manage API error handling, including what should and should not be handled * Understand the distinction between runtime, dynamic data, and static data * Leverage external APIs as part of your own APIs **Who This Book Is For** API developers, API security experts, software architects, product owners, and business owners Implement application programming interface (API) usability, security, availability, reliability, and scalability to extend your company's market and potentially generate revenue. Businesses know they need to extend their markets into the digital world, and expose internal data to the Internet. This book shows how stakeholders within an organization can make it a successful journey. Stakeholder needs are not identical and departments experience difficulties discussing requirements with each other due to their different fundamental understanding of the process. The goal of this book is to introduce a common language for all business groups - developers, security experts, architects, product managers - around APIs and provide an overview of all aspects that need to be considered when exposing internal data. Most of the content in this book is based on feedback from real-world enterprise customer questions, challenges, and business scenarios. Practical guidance is provided on the business value of APIs, the general requirements to know, and how to undertake an audience-based implementation. You will learn how to protect access to data, as well as API error handling, documentation, management, integration, and more Front Matter ....Pages i-xiv APIs: What Are They? (Sascha Preibisch)....Pages 1-9 API Stake-holders (Sascha Preibisch)....Pages 11-21 Importance and Relevance of APIs (Sascha Preibisch)....Pages 23-39 API Design (Sascha Preibisch)....Pages 41-60 API Authentication and Authorization (Sascha Preibisch)....Pages 61-105 API Implementation Details (Sascha Preibisch)....Pages 107-124 API Gateways (Sascha Preibisch)....Pages 125-142 APIs and Microservices (Sascha Preibisch)....Pages 143-158 Real-Life API Examples (Sascha Preibisch)....Pages 159-169 Back Matter ....Pages 171-178
