July 2022 Summaries

Michael Coughlin from Metronome discusses the complexities of usage-based pricing models in software companies and introduces Metronome's real-time billing platform as a solution. The platform simplifies billing operations by handling metering, aggregation, pricing, and invoicing, allowing businesses to automate and scale their processes. The guide elaborates on using the Metronome API with Postman to set up and test usage-based billing models. It explains how to request accounts, create API tokens, set up collections, and define billable metrics and customers. Additionally, it provides instructions on generating synthetic data, using Postman to send usage events, and analyzing the data within Metronome. The article concludes by inviting readers to test Metronome and provide feedback.

Thuy Doan, a community engineer at Mux, provides a detailed exploration of Mux's Postman Collection for building and managing video applications, emphasizing the complexities and challenges of video infrastructure. As video content increasingly dominates internet traffic, creating seamless and efficient video solutions is vital, especially in a distributed tech landscape. Doan guides users through setting up real-time, live, and on-demand video experiences using Mux's API, starting with creating a space for real-time communication and progressing to broadcasting and playing back livestreams. The tutorial also highlights the importance of managing latency in different video formats and provides practical steps for using JWTs for secure access control. The post encourages users to explore further capabilities with the Mux API, including Mux Data, and offers various resources and community support for developing innovative video experiences.

MongoDB has evolved from a NoSQL database to a comprehensive cloud service platform, with MongoDB Atlas offering a variety of tools to simplify application development, including the Atlas Data API. This API allows developers to interact with databases via REST APIs, even in environments lacking specific drivers, such as Bash, thereby reducing complexity and maintenance overhead. The integration of the Run in Postman button in MongoDB Atlas enhances the user experience by allowing developers to easily test and explore the Data API using Postman, a popular API testing platform. This feature supports low-code and no-code applications by enabling seamless data flow between applications like Zapier or IFTTT and MongoDB collections, simplifying tasks such as CI/CD pipeline data persistence or automating data entry based on events. MongoDB's partnership with Postman facilitates a streamlined, intuitive process for developers to work with APIs, leveraging Postman's environment setup capabilities to ensure ease of use and adaptability to future API updates.

Postman is enhancing its API Platform to improve security collaboration among stakeholders by introducing a new feature, the Warnings pane, which is currently in beta. This feature alerts API producers to security best practices during the development process, promoting a "shift-left" approach to address security issues early. When a request is sent, the Warnings pane provides a security assessment of the API endpoint and suggests possible fixes for identified issues, thus aiding in the development of secure APIs and reducing surprises during security reviews. Postman users can access this feature by joining the beta program, and additional resources are available in the Postman Security public workspace and Learning Center.

APIs have become essential in modern technology, with businesses across industries increasingly adopting API strategies to enhance operations and bridge applications, as highlighted by Postman's 2021 State of the API Report. With 90% of developers using APIs, enterprises are implementing API programs that offer strategic partnerships, new revenue streams, and added functionality. A key metric for API success is how quickly developers can achieve their first successful API call, with accessibility being crucial. Postman's Public API Network facilitates this by enabling organizations to create public workspaces, which streamline developer access to APIs. This approach has proven successful for companies like Salesforce and Microsoft Graph, which have seen significant engagement by using Postman's platform to reduce steps for developers, ultimately minimizing confusion and support needs while fostering productive API interactions.

Stripe, a payments company originally founded as an API-only business, continues to emphasize the importance of APIs in its operations. During a session at Postman’s API-first Design and Development training, Stripe's developer advocate CJ Avilla highlighted the comprehensive approach taken by Stripe in API development, which involves engaging with customers, rigorous design and review processes, and meticulous implementation and release strategies. The company places a strong emphasis on customer feedback through tactics like pair programming and structured user research to understand developer needs and challenges. Their design process is marked by a robust writing culture and a governance team that reviews API proposals, ensuring potential impacts are well-documented. During implementation, Stripe automates testing within its CI/CD pipeline and utilizes custom generators for assets not supported by OpenAPI. Notably, Stripe commits to not deprecating public APIs, ensuring long-term compatibility with integrations.

Passwordless authentication is increasingly being adopted as a more seamless and secure alternative to traditional password-based systems, with methods such as Face ID, SMS passcodes, and email magic links gaining popularity. These methods eliminate the need for storing user passwords on servers, reducing security risks associated with password breaches due to user habits of reusing passwords across platforms. They also offer a better user experience by eliminating the need for users to remember or manage passwords, which can lead to higher conversion and retention rates, as demonstrated by Stytch's 62% conversion increase using passwordless authentication. Stytch, an all-in-one authentication platform, provides developers with tools to implement various passwordless solutions like email magic links, which allow users to log in using only their email address, thereby proving ownership through a secure link. While implementing passwordless flows can be complex, Stytch offers an API to streamline the process, enabling developers to focus on enhancing their products.

API governance necessitates a blend of centralized and federated approaches, requiring both top-down leadership and bottom-up team engagement to ensure its successful implementation across organizations. Effective governance involves enabling teams rather than imposing additional burdens, using guidance that is portable, automated, and integrated into existing workflows such as IDEs and CLIs. It requires strategic leadership support, participation from all stakeholders, and alignment with business objectives to minimize resistance. The iterative process of API governance involves regular design reviews, artifact-driven discussions, and feedback loops that are crucial for refining governance practices and educating teams. By fostering champions within teams and maintaining active communication channels, organizations can create a sustainable governance framework that enhances API quality and compliance while also aligning with organizational goals and improving operational efficiency.

Newman is a command-line tool by Postman that allows users to execute collections of API requests and associated scripts, named humorously after the "Seinfeld" character. It is particularly useful for continuous integration systems, offering a way to automate and test API endpoints by exporting environments and collections in JSON format or fetching them programmatically via the Postman API. Newman provides detailed output on test results and syntax errors, making it a valuable asset for development teams to implement complex scripting and testing logic. The tool can be further customized through JavaScript runner scripts or custom reporters to capture console logs or output data in specific formats. Security practices are recommended to protect API keys and sensitive information, and efficient project structuring is encouraged to reduce redundancy. The author's exploration of Newman in a Twitch chat bot project demonstrates its versatility, as they utilized subfolders and environment variables to create dynamic responses to chat commands, such as fetching jokes or weather information.

In June, Postman launched its first-ever commercials with a unique approach focused on celebrating developers and their contributions to the tech industry, rather than following traditional marketing strategies. The company, founded by three developers, aimed to create authentic and empathetic content by highlighting real developers using the Postman API Platform. Collaborating with creative agency Sandwich and its founder Adam Lisagor, Postman produced a video series that features diverse voices and authentic scripts, avoiding typical gimmicks. These videos, which include extended cuts, are available on Postman's YouTube channel, with new releases continuing throughout the summer.

Postman has transitioned from a simple REST API client to a comprehensive API platform, essential for enhancing API productivity and fostering collaboration. Recent updates in Postman v9.14 focus on improving performance, including faster app launches and workspace loading, with apps now capable of loading 2.5 times faster and workspaces showing a 2 to 4 times increase in sidebar load speed, depending on the workspace size. Enhancements also allow users to access collections, folders, and requests twice as fast, regardless of their size, contributing to a more efficient workflow. Additionally, Postman now consumes 50% less memory, enabling prolonged use without sluggishness. These updates are part of ongoing improvements aimed at increasing workflow efficiency, with future enhancements guided by user feedback.

Postman has introduced several updates aimed at enhancing user workflows, including native support for gRPC APIs and the ability to send monitoring alerts directly to Slack or New Relic, among other features. To help users stay informed about these advancements, Postman offers resources such as the “Unboxing What’s New in Q2” webinar, where the developer relations team provides a detailed walkthrough of the latest updates since early 2022.

During the COVID lockdowns, the author explored indoor workouts and initially embraced using a pull-up bar as a convenient way to stay fit at home. However, the initial enthusiasm waned, leading to infrequent use of the bar, a common issue for those trying to establish new habits. To counter this decline in motivation, the author devised a strategy of tracking usage patterns to encourage consistent exercise. By leveraging Notion's API and Postman, the author created a system to monitor pull-up bar usage, integrating it with their existing organizational tools to maintain accountability and promote regular exercise.

Postman has significantly enhanced its support for gRPC, allowing users to enjoy a more intuitive interface and seamless collaboration features, similar to those available for HTTP. The latest updates include the ability to save multi-file Protobuf APIs in the cloud, making organization and reuse of complex APIs easier. Postman now supports saving gRPC requests in collections, enabling teams to collaborate effectively through shared workspaces, while new features such as collection forking, request duplication, and commenting on requests facilitate a comprehensive collaboration cycle. Users can share gRPC requests via web links and revisit past calls through the History tab for better debugging and learning. Additionally, Postman is moving towards offering gRPC testing capabilities, saved examples, and automatic mock servers, aiming to provide a robust environment for handling various API protocols, enhancing both the development lifecycle and user confidence in gRPC projects.

Postman is committed to fostering an inclusive environment where everyone feels they belong, with a particular emphasis on celebrating Pride Month through meaningful activities. During June, Postman employees participated in events such as the Global Pride History and Culture Trivia game, a panel discussion with the LGBTQ Youth Space, and a Global Book Club that featured "Nonbinary Lives," aiming to enhance understanding and inclusivity. The company partners with community organizations and encourages employee involvement through its Giving and Matching Program, matching donations or volunteer hours to support LGBTQ2+ causes. Postman emphasizes equal opportunity and diversity as core values, implementing policies that reflect global experiences and identities, and ensuring a workplace where individuals from all backgrounds can thrive.

During a recent Postman livestream, Senior Developer Advocate Ian Douglas hosted Product Designer Samay Verma and Technical Lead Saswat Das to discuss Postman Flows, a new no-code tool available in open beta. Flows allow users to visually create a chain of requests, enabling tasks like connecting APIs without writing code, such as automating daily meal orders through a food delivery API interfaced with a user’s lunch plans app. The livestream provided insights into the design and development of Flows, including its differences from the Collection Runner, effectiveness in testing webhooks and WebSockets, and user tips. Viewers are encouraged to explore the Flows beta documentation, participate in discussions on GitHub, and follow Postman on platforms like YouTube, Twitch, Twitter, and LinkedIn for future updates and weekly livestreams.

Postman has introduced updates to its collection sidebar, enhancing the organization, navigation, and actionability of elements within workspaces. Users can now select multiple items simultaneously using keyboard commands like Ctrl or Cmd for individual selections and Shift for range selections, enabling actions such as copying, pasting, and deleting. The sidebar has become more keyboard-friendly, allowing for navigation and selection with familiar shortcuts. Additionally, a new feature allows users to undo moves and duplicates within a time limit, facilitating better organization. Feedback on these enhancements is encouraged to further optimize user experience.