January 2021 Summaries

Postman Galaxy is a global virtual API conference taking place from February 2-4, offering numerous opportunities for attendees to engage with the community and enhance their experience through various interactive features and activities. To maximize participation, attendees are advised to ensure a stable internet connection, set up their profiles on the Hopin virtual event platform for networking purposes, and add must-see events to their calendars for ease of access. The conference provides recorded sessions for those who cannot attend live, with additional resources available in the Reception area. Attendees can navigate the event effectively by taking a guided video tour and are encouraged to participate in community interactions such as live Q&As, expo booths, and social events like Cosmic Happy Hour. The conference also features unique activities like a virtual photo booth with opportunities to win Galaxy-themed swag, ensuring a comprehensive and engaging virtual experience.

Postman Galaxy, held virtually from February 2-4, 2021, is a global conference offering over a hundred sessions focused on API development and insights. Featuring notable speakers like Steve Wozniak and Ellen Ochoa, the event provides a range of talks and panel discussions, such as GitHub's experience with the OpenAPI specification and the global shift toward API-first development. Attendees can also participate in exclusive workshops led by Postman creators, with opportunities to win prizes, including an iPad or Xbox Series X. The conference aims to inspire and equip API professionals and enthusiasts with the latest industry knowledge.

With the growing prevalence of APIs in modern software development, security concerns have become a top priority, as highlighted by Subho Halder of Appknox. The increased complexity and use of APIs expose them to sophisticated attacks, challenging traditional security solutions. Common threats include Man in the Middle attacks, API injections, DDoS attacks, sensitive data exposure, parameter tampering, and broken access control. To combat these, best practices such as robust authentication, securing both frontend and backend data, validating the request-response lifecycle, hashing passwords, and role-based access control are essential. As API usage continues to rise, businesses are urged to integrate security measures from the outset and conduct regular audits to protect against evolving threats.

APIs are fundamental to all connected software experiences, driving digital activities and transactions globally, and their importance is underscored by Postman's handling of 4.7 billion API requests in 2019, a number that continues to rise. To address the growing need for skilled API developers, Postman, with over 14 million users worldwide, is launching the Postman Student Expert Program and the Postman Classroom Program. The Student Expert Program is aimed at enhancing students' API and software development skills, offering training, badges, and exclusive event access. Meanwhile, the Classroom Program provides educators with resources and tools to teach APIs effectively, ensuring students are prepared for the job market, and includes benefits such as free licenses and community access. Both programs are designed to promote API literacy and foster the next generation of developers.

The 2020 State of the API Report highlights the growing reliance on APIs in business operations and underscores the importance of securing API documentation against cyber threats. Postman, a tool for API development, has introduced a Postman Security Scanner to enhance security by scanning publicly available Postman documentation and workspaces for sensitive information, such as authentication tokens and private keys. This feature automatically activates when changes are made to public-facing collections or environments and alerts users via email if it detects any potential data leaks. The security scanner, which currently checks for 14 types of sensitive tokens, aims to prevent unauthorized access to APIs and is part of Postman's ongoing efforts to enhance API security through continuous feature updates and educational resources available in the Postman Trust Center.

In 2020, despite numerous challenges, Postman made significant advancements by launching its platform on the web, introducing a private API Network, and beta-launching public workspaces to enhance API collaboration. The release of Postman v8 marks a significant upgrade, providing a consistent user experience across both its desktop app and web platform. This latest version introduces features such as a universal search function for easy discovery of APIs, a new Home tab for better navigation, customizable panes for workspace efficiency, and an updated sidebar for streamlined access to API data. Additionally, the new context bar offers relevant information at a glance, while improved navigation and search functionalities make self-discovery of features easier for users. These updates aim to enhance user experience and facilitate collaboration, making the process of building, discovering, and using APIs more accessible and efficient.

Postman's introduction of public workspaces allows users to create collaborative environments visible to everyone, enhancing API development and community engagement. These workspaces can be transformed from personal, team, or private settings into public domains with a detailed setup process involving the addition of API specifications, collections, environments, mock servers, monitors, and thorough documentation. Users are advised to ensure profiles are up-to-date and to maintain security by removing sensitive information from environments. Once public, these workspaces can be discovered on the Public API Network, enabling others to watch APIs, fork collections, and comment, thereby fostering new collaborative opportunities and feedback channels. This innovation is particularly appealing to API builders who seek to expand their reach, gather user feedback, and create resource centers, ultimately enhancing the collaborative and innovative potential within the Postman community.

Shift-left testing is a methodology that involves incorporating testing processes early in the software development cycle to prevent issues rather than detect them later, contrasting with traditional shift-right testing, where testing occurs after coding and building. By integrating unit testing and API testing early, teams can adopt continuous integration, security verification, and frequent testing to identify and resolve bugs sooner, reducing the cost and effort associated with fixing defects. Tools like Postman and TestProject facilitate this approach by supporting QA automation engineers in implementing small, manageable tests that can be executed at any stage of development, even in production environments. A real-world example from TestProject illustrates how shifting left improved product quality and customer satisfaction by enabling early detection of defects and creating a robust, high-quality application. The success of shift-left testing relies on several enablers, such as cloud-based testing, visualization of test results, and enhanced team collaboration through integration with third-party tools like Slack and GitHub. Transitioning to shift-left testing requires a cultural change within teams, focusing on early and continuous testing with the aid of efficient API test automation tools to streamline the process and enhance product development.

Sharing new insights about Postman can be rewarding as it empowers users and their teams with enhanced productivity, much like the continuous efforts of Postman engineers who improve the platform's features. To support user education, Postman has launched a video tutorial series called "Level Up," designed to provide quick, digestible tips in under two minutes, catering to the growing community of 13 million users. These tutorials, inspired by interactions within the community, leverage a playful, retro video game style to make learning fun and accessible. Available on the Postman YouTube Channel, these videos cover various topics such as debugging, version control, and dynamic variables, and they encourage viewer interaction for future content suggestions.

Postman's Community Spotlight series highlights influential members of its user base, such as Praveen Mathew from Dublin, Ireland, who actively contributes to the community by answering over 100 Postman-related questions on Stack Overflow since October 2019. As a Test Automation Engineer at Eurofins, Praveen has been a Postman Student Expert since November 2020 and values the inspiration he gains from passionate individuals around him. His dedication to open-source projects, knowledge sharing, and simplifying complex concepts reflects his commitment to community engagement and personal skill development. Praveen believes that addressing community questions enhances his debugging abilities and prepares him to tackle unforeseen challenges in his projects. His insights and experiences are shared on platforms like Medium, and the Postman Community forum offers a space for users to discuss and share API experiences.

Version 2.0 of the Twitter API introduces new features, with annotations being a significant addition that provides contextual information for each tweet. Utilizing the Recent Search API allows users to broaden their search scope beyond a singular term, enhancing the depth of information retrieved. By using tools like Postman, users can easily engage with the API, making requests that return annotations categorized into types such as Person, Place, Product, Organization, and Other. These annotations enable a more nuanced understanding of tweets, revealing hidden dimensions and associations, exemplified by searches like "2020 election," which yield detailed insights into figures, events, and topics. The integration of Postman Visualizer further aids in aggregating these annotations, transforming searches into comprehensive explorations of relevant topics. Overall, the combination of the Twitter API, Postman, and machine learning creates a powerful mechanism for discovering and interpreting the vast amount of information available on Twitter, which can be valuable for businesses, researchers, and social media enthusiasts.

Postman is hosting a virtual, global API hackathon called the Postman API Hack, inviting its community of over 13 million users and 500,000 organizations to demonstrate innovative uses of APIs for a chance to win $100,000 in cash prizes. The hackathon aims to showcase the capabilities of the Postman platform and highlight the business value and user engagement potential of APIs. Participants have from January 5 to January 25, 2021, to submit their projects, with winners announced at the Postman Galaxy API conference on February 3, 2021. Prizes include a $25,000 grand prize, a $15,000 second prize, a $10,000 third prize, and ten $5,000 honorable mentions, along with limited-edition T-shirts for all qualified entries. The event also offers an opportunity for developers to network, enhance their public profiles, and learn from newly introduced public workspaces that facilitate collaborative API development. A panel of experts from companies like Twitter, Dropbox, and CircleCI will judge the submissions.

During a recent livestream featuring Abhinav Asthana, the original creator of Postman, viewers engaged with both Asthana and the CEO in a wide-ranging discussion that revealed intriguing insights about the company's origins and future vision for the Postman API platform. The livestream attracted participation from the Postman community, who posed questions about Asthana's personal interests, including his current video game preferences, and the company's development journey, such as whether it began as a college project. Asthana discussed his vision for Postman as a tool for API testers and addressed how the company balances attracting new users while maintaining satisfaction among existing ones. Although he avoided answering questions about his regrets, the session offered a candid snapshot of his thoughts and experiences. Postman continues to engage with its audience through weekly livestreams and monthly live Office Hours, encouraging followers to stay updated via YouTube, Twitch, and Twitter.