April 2021 Summaries

April has been designated as API Month to celebrate the integral role of APIs across industries, with Postman playing a central role in the festivities. The month featured several significant announcements from Postman, including unlimited API collaboration for small teams, the introduction of the Auto-Flex team policy, and the launch of the Postman Open Technologies Program to support open source API technology. Highlights also included the unveiling of a new "Spotlight" section on the Postman Public API Network, the Postman Student Leader Program aimed at fostering API literacy among students, and enhanced features like reordering examples in collections and custom alerts for better security monitoring. Additionally, Postman addressed community feedback with updates such as new parameters for OAuth 2.0 and the introduction of Postman Groups to simplify user access control. The month underscored Postman's commitment to innovation and community engagement, setting the stage for continued advancements in the API ecosystem.

Postman utilizes a role-based access control (RBAC) system where users are assigned roles that grant specific permissions on various resources like teams, workspaces, and collections. Roles such as Admin, Billing, Developer, and Community Manager are designated at the team level, while more granular roles like Admin and Collaborator apply to specific workspaces. To streamline access management, Postman has introduced a groups feature on its Enterprise plan, allowing admins to organize team members into functional groups that reflect organizational structures. This feature simplifies the process by enabling role assignments directly to groups rather than individual users, automatically granting access to all group members and reducing administrative overhead. For instance, an intern group can be created to ensure new interns gain the necessary access to relevant resources without individual assignments. Admins can manage groups through the "Groups" tab on the Manage Team page, where they can create or delete groups, manage memberships, and assign roles, making access control more efficient and scalable.

The Postman Student Expert training program, launched six months ago, is designed to enhance API literacy among students through a self-paced curriculum. Building on this initiative, the newly introduced Postman Student Leader program offers certified Student Experts the chance to further develop their skills in public speaking, event planning, and teaching, with the goal of fostering API literacy on their campuses. Student Leaders receive access to resources for organizing events, opportunities to participate in Postman activities, and a badge recognizing their leadership. This initiative has already seen success, as evidenced by the accomplishments of the first cohort of Student Leaders, who have conducted workshops and led conferences globally. The program emphasizes mentorship and community involvement, inviting more students to join the movement by becoming certified Postman Student Experts and applying to the leadership program.

The author shares insights and reflections on their experience developing a Twitter hashtag search bot, highlighting a journey of trial and error with the Twitter API. Initially, they faced challenges due to hasty engagement with the API and a lack of thorough documentation review, leading to misunderstandings about data retrieval processes. They mistakenly thought the API restricted certain user information, but learned from a Twitter Developer Advocate that the API's design allows users to selectively request data, similar to GraphQL. The author discusses using Postman's query parameters to include user data in responses and invites other developers to improve the bot's code through collaboration in Postman's public workspaces.

Authentication plays a critical role in APIs, and OAuth 2.0 has become the predominant authorization standard due to its evolving and adaptable nature. Despite maintaining its core principles, OAuth 2.0 has undergone minor enhancements, allowing developers to tailor its use to their needs. In response to community feedback and to align with these advancements, Postman has introduced new features enabling users to specify additional parameters, such as resource and audience, when generating access tokens with OAuth 2.0. This update allows for the specification of multiple resources and audiences to accommodate specific OAuth flows, enhancing workflow management in Postman. Continuous updates and feedback solicitation from users are part of Postman's efforts to optimize API workflows, with more information available on the Postman Learning Center.

A team faced challenges while building an API defined by spreadsheets and documents, with issues arising from inaccurate field counts, mismatched data types, and integration failures. The story highlights the everyday struggles of developers like Developer A and Developer B, who initially relied on spreadsheets for API development, only to encounter numerous obstacles such as incorrect field spelling, case sensitivity, and parsing errors. The narrative underscores the value of using API specifications like OpenAPI over traditional spreadsheets, emphasizing their structured format, schema validations, and extensive tooling support, which can alleviate integration issues and streamline API development. The author reflects on personal experiences, noting the advantages of specifications for maintaining competitiveness in a rapidly changing digital landscape, and encourages others to explore these tools for more effective API management.

Postman has enhanced its Public API Network by introducing a new "Spotlight" section, aiming to facilitate discovery and collaboration among its 17 million users. This section highlights trending workspaces, collections, and APIs, updated weekly based on community engagement. It also features curated selections like "Postman Picks," showcasing hidden gems across diverse categories, and a compilation of innovative projects from a recent hackathon that attracted over 1,900 developers globally. Additionally, the platform offers resources for API newcomers, such as the Microsoft Graph API, which has recently gained popularity. Postman encourages users to share their work publicly and provides guidance on setting up public workspaces, promising more lists to aid in finding top-notch APIs.

API testing is essential yet often neglected in development processes, despite its acknowledged benefits. Postman addresses this challenge by offering built-in features that streamline the testing process, including a suite of pre-made, customizable test scripts, or snippets, which facilitate the implementation of tests with minimal effort. These templates allow users to easily test for specific status codes, validate response body content, and more. To assist users in quickly adopting these tools, Postman provides a concise, two-minute video tutorial demonstrating the use of these customizable snippets for testing.

Postman's Community Spotlight series celebrates its enthusiastic global user base by highlighting active members who contribute significantly to the API platform's continuous improvement. In a featured post, Pranav Davar from Bangalore, India, is recognized for his active participation in the Postman Community forum since January 2021. As a Senior Associate Consultant at InfoSys, Pranav has created 55 posts and read 1,800 posts in his first three months on the forum, driven by a desire to learn about new features and viewpoints. His engagement is fueled by the supportive environment of the community, which inspires him to assist others and gain insights from diverse use cases. The forum is promoted as a vibrant space for API enthusiasts to exchange knowledge and experiences, inviting more users to join the conversation.

Postman's API now includes enhanced filtering and sorting capabilities, allowing users to retrieve and organize APIs more efficiently according to specific needs. Filtering is achieved by using HTTP query parameters that apply a logical AND to multiple criteria, enabling users to retrieve APIs based on certain conditions, like time intervals for updates. Sorting, a newly introduced feature, allows users to order API results by a specific field in either ascending or descending order, though it is limited to one field at a time. Together, these features enable a more tailored approach to accessing APIs, as demonstrated by Postman customer Ohpen, which improved its internal tool for sharing and documenting OpenAPI specifications. By combining filtering and sorting, users can optimize their API retrieval process to enhance the user experience for API consumers.

Carson Hunter and Andrew DeCarlo, software developers at Metadata Technology North America, crafted a project called Docu-Mentor, which won the Postman API Hack Intergalactic Grand Prize, announced at the Postman Galaxy conference. Their project aimed to simplify and improve API documentation processes by addressing pain points in Postman workflows, particularly the difficulty of maintaining and updating documentation. They developed two main components: an object model generator that automates the creation of markdown tables for API models and a Documentation Assistant that tracks documentation progress and provides a completion score. Docu-Mentor leverages Postman's JSON schema, utilizes public workspace functionality, and allows linking between API models and requests, offering a comprehensive solution for documenting API models and improving team collaboration. Their open-source project is available on GitHub and aims to benefit Postman users by providing tools to enhance API documentation practices.

The Supreme Court's decision in the Google vs. Oracle API copyright case marked a significant moment for the tech industry by assuming APIs are copyrightable while ruling Google's use of Oracle's Java API code as "fair use." This ruling, while acknowledging the copyrightability of APIs, expanded the definition of fair use, which many in the tech community, including Postman, view positively as it reduces potential legal friction in API development and usage. The case, originating from Oracle's 2010 lawsuit against Google for copying Java code, has brought attention to the importance of APIs, which are crucial for digital applications, and the ongoing debate over their copyright status. Postman emphasizes that APIs, like restaurant menus, should not be restricted by copyright as they provide structure and organization for digital resources, arguing for a more open approach that fosters innovation and collaboration. The ruling aligns with modern business practices that prioritize rapid evolution and competitive access to digital resources over traditional licensing models, setting the stage for a promising future for the API sector amidst the maturation of API specifications and increased venture capital investment.

Take Our Daughters and Sons to Work Day on April 22 provides an opportunity for professionals working with APIs to engage their children in learning about technology using Postman. Designed as an accessible tool for both children and adults, Postman allows users to send API calls and immediately see the results, making the learning process interactive and game-like for kids. In celebration of this day, which coincides with API Month, a special Postman livestream will be hosted by Arlemi and a co-host to guide children aged 5 and up, along with their parents, through a fun and educational session on APIs. This online event, open to participants globally despite the day being traditionally observed in the U.S. and Canada, will introduce kid-friendly APIs and encourage family bonding over technology exploration. The livestream will take place from 11 am to 12 pm PDT on YouTube and Twitch, where participants can engage interactively.

Postman has introduced an upgraded version of its Run in Postman button, initially launched five years ago to embed collections on web pages, facilitating easy API access. The new version allows users to "fork" collections, creating a copy while maintaining a link to the original, enhancing collaboration by enabling consumers to contribute via public pull requests. This feature keeps collections automatically updated with any changes, ensuring consumers always access the latest version without manual updates. Additionally, linked environments can now be attached to the button, expediting the setup process for API calls. Future enhancements will allow consumers to watch collections for updates and pull changes to keep their forked versions current.

Postman has introduced several new features to enhance collaboration among stakeholders in the API development lifecycle, notably with the launch of Postman public workspaces, offering a comprehensive multiplayer API experience. A significant focus has been placed on security, leading to the development of the Postman token scanner, designed to regularly check for sensitive information in public workspaces and documentation to prevent excessive data exposure. The tool now includes custom alerts, allowing enterprise users to monitor specific sensitive tokens by setting up alerts within the Team Settings, which can be toggled on or off as needed. Once configured, these alerts notify team members via email when a sensitive token is exposed in public-facing Postman resources. Postman continues to innovate and improve its features to support users in enforcing effective security controls within their API development processes.

Postman has evolved from a simple REST client to a leading API platform supporting over 500,000 organizations by enhancing collaboration among developers and business units, including external partners through public workspaces. Recognizing a pain point where developers were hindered in adding team members due to the need for additional license purchases, Postman introduced the Auto-Flex team policy on April 8, 2021. This policy allows admin users to add team members without upfront payment, enabling them to assess the value each member brings before deciding on retention, with billing adjusted monthly or quarterly. This flexibility aims to bolster collaboration and experimentation without impacting payments upfront, allowing teams to optimize user roles and permissions effectively. Postman remains committed to improving its platform's flexibility and reducing friction to maximize the potential of API collaborations across diverse roles.

Postman is advancing its API platform to enhance documentation tools for effective knowledge transfer within teams, with a focus on providing examples that help users understand data formats and request-response interactions. Recognizing the need for improved example management, Postman has responded to user feedback by introducing a new feature that allows users to reorder examples in the collection sidebar through a simple drag-and-drop interface. This enhancement aims to improve the organization and readability of documentation by enabling users to structure examples for better comprehension, such as grouping 'success' responses together. Postman's commitment to user-centric development and responsiveness to community feedback has been pivotal in its growth and platform evolution.

Postman, an API platform that recently reached 17 million developers and 50 million active collections, began as a solution to the repetitive challenges its founders faced with API testing and management. Initially developed as a basic HTTP client for Chrome by co-founder Abhinav Asthana, it quickly gained popularity, leading to the creation of a dedicated company with co-founders Ankit Sobti and Abhijit Kane. The founders focused on user feedback to shape the product, emphasizing a data-driven, user-centric approach to development, which helped them achieve significant market fit and expand the tool's use beyond developers to various business roles. As Postman evolved, it transitioned from a Chrome app to a full-featured platform, ultimately moving to AWS for greater scalability. The community-driven growth strategy fostered an active user base across platforms like GitHub and Reddit, culminating in innovative features like Postman public workspaces. In 2020, Postman launched a new web version and closed a Series C funding round of $150 million, marking a pivotal moment in its journey and setting the stage for future growth.

Postman has launched Postman Open Technologies to enhance its support for open source API technology, reinforcing its commitment to open specifications, standards, tooling, and data that underpin the API economy. This initiative focuses on four key areas deemed critical for scaling APIs across industries: specifications like OpenAPI and JSON Schema, standards such as FHIR and PSD2, tooling in the open source landscape, and the role of APIs in open data efforts. Postman aims to position itself as a leader in open source API technology by fostering public workspaces, defining API specifications, creating Postman Collections, and producing educational content such as articles, white papers, and videos. With origins in Postman's open philosophy and partnerships with entities like the OpenAPI Initiative, Postman Open Technologies seeks to boost investment, collaboration, and coordination in the API community.

Postman is expanding its open source API specification team by appointing Ben Hutton, a well-known figure in the JSON Schema community, as their JSON Schema specification lead. This move aims to enhance Postman's influence and support for the JSON Schema community, as well as to strengthen the integration of JSON Schema with other critical API specifications like OpenAPI and AsyncAPI. JSON Schema is essential for annotating and validating JSON documents, and it plays a crucial role in defining API requests and responses. Postman's involvement does not aim to control the direction of JSON Schema but rather to ensure it evolves in coordination with OpenAPI and AsyncAPI, providing a stable and standardized foundation for API operations. This strategic partnership highlights Postman's commitment to fostering collaboration within the API ecosystem, ultimately contributing to the development of a more standardized, machine-readable, and open-sourced API lifecycle.

API growth is rapidly increasing, exemplified by the creation of the fifty-millionth active Postman Collection by its user community. APIs are revolutionizing various industries, from agriculture to music technology, prompting Postman to officially declare April as API Month, celebrating APIs' significance and impact. Throughout April, Postman plans to make exciting announcements and provide new opportunities for users to enhance their API knowledge and capabilities. Users are encouraged to engage with Postman's API Builder, explore over 1,200 public APIs on Postman’s Public API Network, and participate in the new public workspaces to celebrate and maximize the potential of APIs during this dedicated month.