Demystifying the API Lifecycle

What makes some APIs successful? How do I design, build, operate and consume APIs to increase my chances of success? This track will address these and other questions through best practices,design patterns, tools, frameworks and case studies from leading experts.

Day of week:

Monday

Location:

Bayview A/B

Host:

Jeevak Kasarkod

Presentations

What Makes a Great API?

10:30am - 11:20am

By: John Musser
Founder, Programmable Web

Although there are now thousands of web APIs available not all APIs are created equal. What is it that makes a good API into a great API? How do you get developers to love your API?

This talk will show how it's done based on real-world experience with thousands of APIs at ProgrammableWeb and API Science. Building a world class API is harder than it looks (hint: being RESTful is not enough). From technical questions about protocols and data formats, to security models, developer experience (DX), and more. This session will be a deep-dive on helping you build better APIs and platforms.

The Magic Behind Enterprise Apps: How to expose Reliable, Scalable and Secure Enterprise APIs?

5:20pm - 6:10pm

By: Blake Dournaee
Sr Product Manager for Intel® Expressway API Manager

Enterprise mobile apps consume and mashup data from a variety of backend applications through APIs and a successful mobile app performs it efficiently to provide a seamless and enjoyable experience to the user.

This session covers the often forgotten back-end architecture for mobile apps which should expose cross-platform APIs to mitigate some of the effects of mobile O/S fragmentation. This will entail a detailed discussion of the evolution (or devolution) of the three tier architecture into an optimized, decoupled 2-tier architecture for API exposure that addresses security and data mediation among other capabilities. As a result, this approach enables a traditional Enterprise to leapfrog to mobile applications.

An attendee should expect a discussion of design patterns followed by a conference room booking demo to illustrate the approach.

Topics covered include, the role of Websockets in optimizing performance, mobile friendly security workflows and open source tooling for HTML 5 client app development.

API Security and Federation Patterns

11:45am - 12:35pm

By: François Lascelles
Chief Architect at Layer 7 Technologies

The adoption of Mobile and Cloud applications drives API traffic across domains. OAuth 2.0 is being implemented in complex enterprise environments where new authorization endpoints are combined with various existing identity components, in various configurations.

Handshakes are federated to help provide a single sign-on experience across applications and enhance adoption. Mediation between tokens at the edge of each domain helps extend existing data to new channels. Core grant types, extension grant types, custom schemes, standards, patterns and use cases – let us count the ways in which API access control is applied.

This presentation will examine the role of API management infrastructure in API Security, API Access Control and API Federation and its interaction with enterprise infrastructure, social identity and application developers.

Presentations

Redesigning PayPal APIs for scale and simplicity

4:05pm - 4:55pm

By: Deepak Nadig , Praveen Alavilli
Head of Platform Engineering, PayPal-- Architect for Developer Products at Paypal

PayPal provides faster and safer ways to pay and get paid online. Processing over $145 billion in total payment volume in 2012, and in 193 markets, PayPal's core business has been powered by APIs since its inception. Beginning with simple HTML buttons for the web, PayPal APIs evolved over the last 14 years, driven by business needs and technology evolution, have enabled integrations across a variety of channels including mobile, point of sale and other connected devices (e.g. televisions, game consoles).

In this talk, you will learn about how PayPal redesigned its APIs using the lessons learnt on this journey, the principles, patterns and anti-patterns in API design.

API Lifecycle Open Space

2:50pm - 3:40pm

By:

Evolution of the Netflix API

1:35pm - 2:25pm

By: Ben Christensen
Software Engineer, Netflix API Platform

Netflix streaming has been growing tremendously, now reaching more than 38M subscribers in over 40 countries. These subscribers are enjoying Netflix on more than 1,000 different device types, ranging from game consoles to set-top boxes, TVs and mobile devices. This is all made possible by a complex service-oriented architecture that handles billions of requests a day from those devices. At the center of that architecture is the Netflix API, which is the front door to the entire system.

This presentation will describe how the Netflix API evolved from a typical one-size-fits-all RESTful API designed to support public developers into a web service platform optimized to handle the diversity and variability of each device and user experience. The presentation will also address the challenges involving operations, deployment, performance, fault-tolerance, and rate of innovation at massive scale.