microapis.io

An occasional newsletter with information, discussions, recommendations, and tips about writing software and building microservices, APIs, and distributed systems.

The hottest Substack posts of microapis.io

And their main takeaways

The future of APIs is promising and bleak

58 implied HN points • 11 Jan 24

🕹 Technology APIs Security Documentation

The way APIs are built today makes them pervasive, but we still struggle to work effectively with them.
Improving API development involves focusing on accountability and security.
For better APIs, focus on clear specifications, formal documentation, and rigorous security testing.

Introducing Fencer

196 implied HN points • 21 Feb 23

🕹 Technology APIs Open Source Security Automation Programming

API security testing requires a holistic approach covering all components
There is a need for open source automated API security testing tools
Automating API security testing can help catch vulnerabilities and reduce breach risks

Everything you always wanted to know about JSON Web Tokens

176 implied HN points • 09 Nov 22

JSON Web Tokens (JWTs) are JSON documents with user information, base64url encoded.
JWTs have ID tokens for user identification and access tokens for authorizing API access.
To validate a token, you check the signature, claims like audience and expiry, and use tools like jwt.io.

Faster time-to-market with API-first

176 implied HN points • 05 Nov 22

API documentation is crucial for a successful project
Validating the API implementation is essential before release
Using a proper API framework can significantly improve development speed and software quality

Introducing the Restaurant Booking API

98 implied HN points • 24 Mar 23

🕹 Technology APIs Development Database Authentication Security

The post introduces the Restaurant Booking API series with educational tutorials and practical examples.
The API will cater to customers and restaurant owners, allowing tasks like booking tables and managing menus.
Key URL paths in the API include '/restaurants', '/owners', and '/customers', with detailed functionalities for each.

Get a weekly roundup of the best Substack posts, by hacker news affinity:

Using Azure Active Directory to authorize access to your APIs

58 implied HN points • 20 Mar 23

🕹 Technology Programming Security Authentication APIs Azure

Azure Active Directory can issue custom API tokens for access to APIs
Scopes play a crucial role in determining the type of token issued by Azure Active Directory
You can restrict access to your API to specific user groups in Azure Active Directory

Coming soon

176 implied HN points • 29 Mar 22

The newsletter is about Microservice APIs, software development, and distributed systems.
Subscribe to microapis.io for updates on Microservice APIs.
Stay tuned for more content on microapis.substack.com.

What are OWASP’s Top 10 API vulnerabilities?

3 HN points • 27 Feb 23

🕹 Technology Vulnerabilities Authentication

OWASP's Top 10 API vulnerabilities include issues like broken user authentication, excessive data exposure, and lack of resources & rate limiting.
Broken Object Level Authorization can lead to attackers accessing information they shouldn't.
API security is crucial due to the growing use of APIs, potential risks, and the significant impact of poor API security on organizations.

APIs with bounded contexts

3 HN points • 06 Mar 23

🕹 Technology APIs Design Modeling Rest Heuristics

Aligning APIs with the business strategy and ensuring usability are key for API success.
Domain-driven design helps in creating successful APIs by modeling processes and flows that align with the business domain.
Despite challenges, applying domain-driven design to APIs can be achieved by using heuristics to model operations and flows.