January 2022 Summaries

Postman's 2021 State of the API Report reveals significant trends in the API landscape, including the diversification of roles involved in API usage beyond traditional developers, with about half of survey respondents identifying with non-development roles such as management and business analysis. This shift reflects a broader industry move towards data-driven operations, where APIs facilitate access to information across various job functions. The report also highlights that newer generations, primarily Millennials and Gen Z, dominate the API field, often with less than five years of experience, underscoring the need for organizations to support these early-career professionals in navigating foundational industry knowledge. As APIs become increasingly crucial across different sectors, ensuring their accessibility and usability for non-engineering roles, as well as adequately supporting emerging API practitioners, are identified as key challenges for the future.

Offices have transitioned from managing physical documents with file clerks to utilizing advanced software for digital document management, including storage, eSignatures, and team collaboration. The Postman API Network offers a variety of top-notch APIs that streamline document management and automate workflows, making them valuable tools for developers. Dropbox, for instance, provides an API collection for administrators to automate bulk tasks, while HelloSign and PandaDoc offer APIs for implementing electronic signature flows and document generation and tracking. DocuSign's APIs facilitate comprehensive eSignature and agreement processes across various sectors like real estate and payments. These APIs represent a diverse selection available for integration with other business applications, and Postman encourages users to explore and experiment with these tools in their public workspaces while also inviting recommendations for additional automation APIs.

Jamstack, originally a web architecture composed of JavaScript, APIs, and Markup, enables sites to serve static content while providing dynamic, interactive experiences through client-side JavaScript and reusable APIs. This architecture decouples the frontend from the backend by deploying content to a content delivery network (CDN) rather than a backend server, allowing for rapid delivery from edge servers and serverless-hosted APIs. Jamstack has evolved beyond static sites, gaining popularity among hobbyists and enterprises due to its flexibility and the burgeoning API economy, which offers a variety of third-party services. A simplified example using Postman illustrates building a Jamstack application by creating a mock server, visualizing data via HTML templates, and integrating APIs, showcasing the versatility and creativity the architecture allows. JavaScript and APIs support dynamic data interaction, and external libraries can be incorporated for extended functionality, with the architecture fostering innovation and adaptability.

In the rapidly evolving world of data management, database providers are increasingly offering public APIs to integrate their services into the developer toolkit, enhancing accessibility and usability. Notable among these companies is MongoDB, known for its flexible schema and multi-cloud database service, MongoDB Atlas. Notion, a versatile note-taking and project management tool, allows users to manipulate structured data through its Public Beta APIs. HarperDB offers a geo-distributed database with hybrid SQL and NoSQL capabilities, primarily interacted with via their REST API. Snowflake provides a cloud-based data warehousing solution with a SQL API for developing custom applications and integrations. These innovations, highlighted in the Postman API Network, represent a diverse range of data storage solutions that push the boundaries of technology, encouraging developers to explore and leverage their capabilities.

Google addressed its API inconsistencies and usability issues by implementing a lightweight, scalable design review process, as outlined in their 2016 paper on API design reviews. This approach emphasized peer review, harnessing diverse perspectives to enhance the intuitiveness, completeness, and consistency of service interfaces, which ultimately proved more efficient than traditional usability tests. The process involves capturing API operations in standardized formats like OpenAPI or AsyncAPI, allowing for automated tooling and fostering meaningful discussions on API design. Style guides play a crucial role in setting consistent standards, while feedback loops ensure continuous improvement by incorporating insights from both reviewers and developers. Google found that post-review, their APIs were more consistent and aligned with the overall ecosystem, significantly benefiting the developer experience.

APIs often experience varied deployment processes despite some standardization in development, as highlighted in the 2021 State of the API Report, where 27% of users resorted to custom solutions for deployment. The latest release of Postman addresses this by integrating with the AWS API Gateway, allowing developers to manage both API development and deployment from a single platform. This integration enables users to observe deployment details, correlate them with API schemas, tests, and documentation, and manage versions and releases efficiently. Postman facilitates the deployment workflow across different environments, providing insights into the various AWS API Gateway stages and allowing developers to see comprehensive deployment data, such as timestamps and URLs. This streamlined process ensures that API lifecycle management becomes more cohesive and efficient, reducing the need for disparate tools and custom solutions.

A comprehensive API lifecycle is crucial for maximizing the efficiency and governance of APIs across various teams within an organization. Establishing a shared understanding and common vocabulary around the API lifecycle helps improve productivity, quality, and governance, making it easier for teams to align on API development. The lifecycle is broken down into eight stages: defining, designing, developing and documenting, testing, securing, deploying, observing, and distributing for discovery. Each stage incorporates specific practices such as using OpenAPI specifications for design consistency, conducting contract and performance testing, ensuring security through authentication and regular tests, and deploying APIs using CI/CD pipelines and gateways. Additionally, monitoring and logging changes are vital for maintaining API performance and security, while effective distribution methods, including private and public networks, facilitate discovery and collaboration. These elements form a blueprint that organizations can customize to fit their unique needs, promoting a standardized approach to API lifecycle management.

Postman has expanded beyond its traditional HTTP roots by introducing first-class support for gRPC, now available in open beta for Postman v9.7.1 and above, allowing developers to test gRPC APIs efficiently. Users can upload Protobuf definitions to automatically understand services and methods, generate example payloads, and save Protobuf definitions to the Postman cloud for collaboration. Key features include support for various gRPC methods, autocomplete for composing messages, client-side type-checking, server reflection, and advanced streaming functionalities. Postman's integration with platforms like GitHub and Bitbucket enhances workflow efficiency by synchronizing proto files with repositories. While currently in beta, Postman plans to integrate comprehensive gRPC support throughout its ecosystem, including documentation and code generation. This expansion is driven by community feedback and aims to enhance the developer experience by making testing and debugging seamless.

Postman's latest release enhances its capabilities by allowing users to capture and analyze HTTP traffic through the Postman proxy or Interceptor within defined sessions, providing a more focused debugging experience. Users can now pause and clear traffic without stopping the proxy or Interceptor, and previously recorded sessions remain accessible via the History tab. The update introduces advanced filtering options that enable users to search or filter requests by criteria such as response type and code, allowing for more efficient traffic analysis and organization into Postman Collections for collaboration and documentation. Additionally, Postman now supports syncing cookies from Chrome-based browsers to its Cookie Jar, with the ability to trace cookie modifications over time, enhancing visibility and management of cookie data within sessions.

Postman has introduced support for importing HAR (HTTP Archive) files in its v9.6 and later versions, responding to one of the most popular feature requests from its community. HAR, a JSON-based format created by HTTP-based tools like web browsers, is used for identifying and troubleshooting performance and rendering issues. With this update, users can import HAR files into Postman to generate collections, visualize requests, replay sessions, and analyze responses. The process involves importing HAR data through various methods, with options to configure settings such as cookies and request organization. Postman encourages users to try this feature and provide feedback to help improve the platform, inviting interaction through GitHub, the Postman Community forum, or direct contact via email.

Postman, an API platform, saw numerous releases and enhancements in the past year, prompting a poll among its team to discover their favorite features as they entered 2022. Preferences varied based on job roles, with developers favoring integrations for automating workflows, while those engaging with API producers leaned towards design and development tools. Among the top picks were scripts for modeling complex use cases, monitors for API health and performance, workspaces for collaboration, collections as foundational elements, and the API Network for discovering new APIs. The diversity of favorite features highlighted the platform's versatility, and a contest was launched inviting users to share their favorite Postman features on Twitter for a chance to win a prize, showcasing the community's engagement with the tool.

Organizations face challenges in managing numerous APIs, often leading to design inconsistencies that affect developer experience and require increased support. OpenAPI design templates offer a lightweight solution for aligning API design without the need for heavy-handed governance. These templates guide designers by providing uniform examples for common tasks such as pagination, versioning, and filtering, which helps maintain consistency and focus on business-specific problems. The Postman Open Technologies team created the OpenAPI Governance Template public workspace to support this effort, offering a repository of standardized templates that facilitate comparison of different design approaches and promote adherence to organizational style guides. This workspace not only improves API consumer developer experience but also encourages the use of established standards like RFC or ISO, enhancing compatibility across systems. By incorporating these templates into their processes, organizations can efficiently govern API design while enabling developers to customize and innovate within a structured framework.

Postman provides a comprehensive API platform designed to support API producers and consumers at various stages of their journey, from individual use to organizational scale. While the free tier offers essential tools for individuals to deploy and integrate APIs, the Team plan enhances collaboration through shared workspaces and higher API limits. For those aiming to scale their operations across multiple teams and domains, the Enterprise plan becomes crucial, offering advanced features like Single Sign-On, automated provisioning, role-based access control, and detailed reporting and analytics. This plan is particularly valuable for organizations undergoing digital transformation, as it enables seamless coordination and control of API operations, ensuring alignment with enterprise objectives. Acknowledging the human-centric nature of APIs, Postman emphasizes that successful API management involves not just technical capabilities but also effective communication and collaboration among team members. By framing API operations as a journey, the Postman platform helps organizations navigate their API strategies, providing the necessary tools and capabilities to advance their digital initiatives.

Last September, the Postman API Platform introduced new capabilities for API management, enhancing integration with version control systems like GitHub, Bitbucket, and now GitLab, which expands access to users on both cloud and enterprise plans. This integration allows API definitions and collections to be synced and managed alongside source code in repositories, facilitating a seamless transition to an API-first development model that emphasizes interconnected services. By supporting workflows familiar to developers, such as branching, the platform aims to improve productivity and foster collaboration throughout the API lifecycle. The Postman desktop app version 9.3.0 and newer, along with the web version, provide these functionalities, encouraging users to explore the platform and offer feedback on their experiences.

Postman's latest release enhances API development and testing by introducing variable types, specifically "default" and "secret," to improve data security and collaboration. Variables in Postman, often used to store sensitive information such as API credentials, now allow users with editor access to specify types, ensuring sensitive data is protected. The secret variable type masks values to prevent exposure during screen sharing or livestreaming, addressing vulnerabilities like over-the-shoulder attacks. Users can toggle between secret and default types, with secret values masked for all workspace members unless changed. This update continues Postman's commitment to secure data handling, aiming to boost productivity while maintaining tight security during collaboration.

Postman has introduced a new Super Admin role to facilitate centralized management of users and resources within teams, addressing a popular customer request for streamlined administrative capabilities as teams grow larger. This role allows a user to manage all aspects of a team, including team settings, members, groups, resources, workspaces, and billing settings, surpassing the capabilities of other roles like Admin, Billing, Community Manager, and Developer. The implementation is based on role-based access control (RBAC), where roles are assigned based on organizational functions, each with specific permissions. Key roles include Admin, who manages team members and settings; Billing, who handles team plans and payments; Community Manager, who oversees public visibility; and Developer, who accesses resources and workspaces. Additional granularity is provided at the workspace level with roles such as Workspace Admin, Workspace Editor, and Workspace Viewer, and at the element level with Editor and Viewer roles. The Super Admin role is available on the Enterprise plan, enhancing the ability to efficiently manage teams and resources in Postman.

Organizations using the Postman API Platform often face challenges with employees using Postman independently, leading to issues in compliance, security, data policies, and reduced collaboration. To address this, Postman has introduced a domain capture feature available on the Enterprise plan, which allows organizations to identify and manage all user accounts created with their domains or subdomains. This feature consolidates these accounts into a single Postman team, ensuring that new users signing up with the organization's domain are automatically included, thereby enhancing compliance, collaboration, and user management. Organizations can begin using this feature by verifying their domains in Postman's Authentication settings.

As the new year begins, many individuals look to set personal goals, whether related to physical fitness, sleep, healthy eating, reading, music, or financial management. A Postman public workspace offers six APIs to help achieve these resolutions. The Strava API can track fitness activities, while the Oura Ring API monitors sleep patterns and readiness. For culinary enthusiasts, the spoonacular API provides recipes accommodating dietary restrictions. The Penguin Random House API aids in exploring books by favorite authors, and the Spotify Playlist Generator offers personalized music playlists. Lastly, the You Need A Budget (YNAB) API helps organize and manage finances. These tools can support users in adopting and maintaining new routines for a successful and fulfilling year ahead.