September 2021 Summaries

Throughout October, Postman is participating in Hacktoberfest, an annual event organized by DigitalOcean to promote open-source software, by hosting an API-first student event. This initiative enables students to engage in API-first development by either building a frontend using Postman's Halloween Costume Contest API mock server or creating a live API server using their schema. Participants can enter a raffle for a $250 Amazon gift card by completing their projects by October 31, 2021, and may also qualify for Hacktoberfest's limited-edition T-shirt by having four pull requests approved. Postman supports API-first development, which involves designing APIs as the primary building blocks of software, allowing teams to work concurrently with a schema as a blueprint. The event encourages collaboration through community channels like Discord, where Postman hosts office hours and provides support. Students can work individually or in teams, and are encouraged to be creative in their projects, potentially winning prizes and gaining experience in open-source contributions.

Postman underscores its dedication to security by implementing several updates to enhance the protection of user data and facilitate the development of secure APIs. A notable advancement is the Postman Secret Scanner, which now scans an additional four tokens—Airtable API Key, GitHub Personal Access Token, Telegram Bot Access Token, and Twilio API Key—alongside the existing 14, with the option for Postman Enterprise users to add custom tokens. Enhancements also include in-app notifications for identified sensitive tokens, supplementing the previous email alerts, thus streamlining the process of staying informed about potential data exposures in public workspaces and documentation. Users have the flexibility to manage notification preferences, and additional resources for improving security practices are available in the Postman Security public workspace.

Authored by Postman Engineering Manager Avinash Choudhary and Product Manager John Kilgore, the piece highlights the advantages of private APIs for organizations, such as reduced development time and resource reuse, while also addressing the challenges in discovering these APIs internally. As the number of private APIs grows, it becomes increasingly difficult for developers to locate the ones they need, often leading to wasted efforts and duplicate functionalities. To tackle these issues, Postman introduced the Private API Network, a centralized directory that facilitates the discovery of internal APIs within organizations. This network features tools like multi-level folder organization, API Overview pages, version visibility, filtering options, governance reports, and GitHub import capabilities, all designed to enhance API discoverability and streamline internal API management.

In the rapidly evolving world of software development, the increasing demand for seamless, multi-device experiences has led to a significant shift towards an API-first approach, which views APIs as essential building blocks for modern software. This approach has emerged as a response to the challenges faced by traditional, monolithic application architectures, which struggle to scale and integrate disparate parts efficiently. APIs facilitate the connection between internal and external services, enabling more cohesive and scalable software solutions. The Postman platform exemplifies this API-first mindset by providing an integrated suite of tools for API management, including design, testing, monitoring, and collaboration, which are essential for the successful deployment and integration of APIs. As organizations transition from a code-first to an API-first model, they require robust API platforms that not only manage the API lifecycle but also foster collaboration and governance, ensuring security and adaptability in a cloud-first environment. This shift is driving the need for new kinds of gateways and solutions, as seen in the evolving landscape of vendors and open-source offerings, which are crucial for organizations looking to harness the full potential of APIs in their digital strategies.

Postman has evolved significantly from its inception, focusing on streamlining API workflows by integrating with various third-party tools and continuously updating its features to accommodate the growing needs of its users. Initially starting as a small team, Postman now supports a wide range of functionalities, including integrations with tools like GitHub, Datadog, and PagerDuty, allowing users to manage API collections and monitors more effectively. The platform has addressed the complexity and onboarding challenges faced by API-first teams using multiple tools by enhancing version control capabilities and linking API constructs with source code repositories, supporting a Git workflow. This updated integration allows seamless syncing of API definitions with code repositories, ensuring collections and specifications are aligned with development processes. Additionally, Postman has launched an updated API platform that integrates with DevOps tools, making it easier for teams to manage their API lifecycle, view deployments, and access critical performance data, ultimately acting as a comprehensive source of truth for private and public APIs.

Managing multiple users, devices, and applications is a challenging task for IT and system administrators, but Postman has introduced a new solution with the Postman Enterprise App, a variant of its desktop application tailored for enterprise-scale deployment. This new app is available as an MSI package for Windows, supporting silent and system-wide installation, and offers additional configuration options to control installation on devices. It integrates seamlessly with enterprise mobility management (EMM) solutions, allowing organizations to easily manage installations, updates, and patches across their user base. The Postman Enterprise App is currently available in private beta, and interested enterprise teams can enroll by contacting their Postman account manager or emailing the provided address.

APIs are fundamental to modern software, serving as key components for both internal and external functionalities. Postman, originally a simple API testing tool, has expanded to encompass the entire API lifecycle, emphasizing an API-first approach that prioritizes APIs as central to software strategy. This shift from code-first to API-first involves challenges but offers significant benefits, including enhanced collaboration and innovation. Postman's new API Platform integrates various tools and processes into a cohesive system, enhancing API management, version control, and consumer experience. The platform supports public, partner, and private APIs, each with specific purposes and governance needs, and aims to streamline API discovery, documentation, and monitoring. By incorporating improved integration with tools like version control systems and CI/CD pipelines, Postman facilitates a seamless API workflow, ultimately advocating for a transition to API-first methodologies as essential for future business success.

Upon joining Postman's data team, the author encountered significant challenges in navigating and understanding the company's data due to a lack of consistency and transparency, leading to repeated questions and a loss of trust in the data. As Postman scaled, the need for a democratized data system became evident, prompting the team to embark on a project to improve data accessibility and understanding. Initial solutions involved documenting data in Confluence and creating a data dictionary in Google Sheets, but these efforts faced challenges in scalability and documentation quality. Ultimately, the team adopted Atlan, a modern data workspace, which successfully provided a single source of truth, improved data discovery, and reinstated trust by ensuring consistency in data metrics. This has not only addressed immediate discovery issues but also set the stage for tackling larger data challenges like data lineage, aiming to enhance data awareness and drive data-driven decision-making across the company.

In episode 5 of "Breaking Changes," Postman Chief Evangelist Kin Lane discusses digital transformation in the public sector with Allen Helton, Software Engineering Manager at Tyler Technologies. Helton shares insights into how APIs have been internalized in his organization, particularly through the implementation of serverless computing, which allows developers to focus on business problems rather than infrastructure concerns and adheres to a single-responsibility principle for security. The conversation also explores the iterative use of WebSockets to enhance user experience, moving from basic operations to more dynamic, asynchronous interactions. Helton emphasizes the importance of API governance and testing, describing how Tyler Technologies uses a governance collection in Postman to enforce standards and automatically generate comprehensive tests, thereby improving efficiency and reliability across their API infrastructure. The episode highlights the evolution from REST-based operations to more mature, event-driven architectures in response to user experience demands.

Postman's Public API Network has become the world's largest API hub, enabling over 17 million developers to innovate by providing a vast array of APIs with comprehensive documentation. The platform's latest feature, collection-recommendations, helps users discover and work with public APIs more efficiently by suggesting relevant collections based on a project's context, such as request attributes and user engagement metrics like forks and views. This feature enhances developers' ability to integrate APIs, as exemplified by the Twitter API, by offering official and community-driven collections that cater to various use cases. Postman's focus on leveraging community contributions aims to reduce redundant efforts and improve discovery and efficiency, with plans to introduce additional capabilities in the future.

Postman, once a scrappy startup, has grown from 4 million to 17 million users worldwide as APIs have become integral to business operations, with diverse professionals relying on it for API development. This surge in API use has increased the demand for Postman skills, making them valuable for career advancement in the tech industry. To address this, Postman offers various training resources such as Postman Intergalactic for role-based training, self-guided modules for badge achievements, and the Student Expert Program to promote API literacy. Additionally, a vibrant Postman community, including educators and content creators like Valentin Despa, Bezael Pérez, and Pricilla Belwin, contributes unofficial learning resources, enhancing the knowledge-sharing ecosystem for Postman users.

In episode 4 of the "Breaking Changes" talk show, Postman Chief Evangelist Kin Lane and EveryDeveloper CEO Adam DuVander explore the intricacies of creating impactful content in the API world, emphasizing the importance of storytelling from the developer's perspective. The discussion highlights common pitfalls in API content, such as confusing documentation and unengaging announcements, and suggests strategies to produce content that resonates with developers by aligning with their needs and sparking curiosity. Adam DuVander advises on crafting content that genuinely connects with technical audiences, stressing the value of consistent, problem-solving communication over one-time content hits and the necessity of maintaining a clear point of view. The show also covers scaling content efforts strategically by identifying relevant topics and pairing engineers with editorial teams to produce sustainable and meaningful content. Kin Lane underscores the importance of establishing feedback loops and tapping into community talent to enhance the developer experience and ensure content authenticity. The episode encourages reaching out to developers directly and leveraging community interactions to refine content strategies, aiming to create a sustainable impact within the developer community.

The author shares their experience with creating a coding challenge called "30 days of Postman — for developers," inspired by a similar challenge on HackerRank. The challenge involves participants forking daily tasks to their public workspace, solving them locally, and submitting a final solution as a pull request for review by the Postman team, with successful participants earning a badge and a spot on a public leaderboard. Despite efforts to balance the difficulty, only 11.2% of participants completed the challenge, which the author attributes to the importance of persistence and resourcefulness in learning. The author believes the challenge is appropriately difficult, providing valuable skills such as using online documentation and forums for assistance, and sees no need to make it easier, as it could undermine the achievement of those who successfully complete it.