January 2023 Summaries

The Postman Student Leader Program, initiated in 2021, offers students who have earned their Postman Student Expert badge an opportunity to become leaders advocating for API literacy on their campuses. The program provides resources, badges, event opportunities, exclusive community access, and financial support, having started with 18 leaders and grown to 137 across 19 countries. The first cohort of graduates, representing 33 campuses and impacting over 8,000 students through 56 events, includes notable participants who have organized API Fest, involving 108 teams from 28 countries. Aspiring student leaders are encouraged to first become Postman Student Experts, with the program offering additional support through its Classroom Program and community Discord.

Postman has introduced significant upgrades to team profiles on the Postman Public API Network, enhancing customization and improving the onboarding experience for API consumers. These enhancements include an "About team" section for introducing teams and their APIs, a "Team summary" for concise introductions visible in search results, and a "Highlights" section for pinning and organizing key resources like public workspaces, APIs, or collections. Teams can also add links to official websites and social media platforms such as Twitter and GitHub, offering additional ways for consumers to engage and learn more. All public resources of a team, including workspaces, collections, and APIs, are conveniently accessible from the team profile, facilitating easy discovery and navigation for users.

Postman Quickstarts is an interactive, hands-on learning platform designed for the Postman community to enhance their knowledge of APIs through tutorial experiences. These tutorials guide users through building collections and exploring various API workflows, covering topics like "Getting Started with HTTP APIs," "Snapshot Testing," and "Continuous Quality," with more topics continuously added. Users can filter lessons by experience level or job function and earn badges upon completion, making it suitable for personal development or team goals. The platform is open for contributions, allowing users to create and submit their own tutorials using Markdown syntax without needing to write code. Published at quickstarts.postman.com, this initiative invites educators and API enthusiasts to contribute educational content, offering a step-by-step learning experience while automatically saving progress, and serves as an entry point for those new to open-source contributions.

As APIs continue to gain prominence in software development, proficiency in Postman has become a critical skill for API testing professionals, including roles like test engineers and QA analysts. Job applicants are often required to demonstrate their Postman skills during interviews, and hiring managers look for candidates who can showcase their current knowledge and eagerness to learn. A self-quiz can help individuals assess and enhance their Postman abilities, serving as a roadmap for career development. For hiring managers, customizing a skills checklist from a GitHub repository can guide the interview process and aid in creating development plans for candidates. Sharing assessments and engaging in team discussions about Postman can foster growth and align goals, while additional resources like the "15 Days of Postman" challenge offer opportunities for skill advancement and earning recognition.

In a presentation at the API Specifications Conference, Ian Douglas, a Senior Developer Advocate at Postman, emphasized the importance of API contract testing and validation to ensure high-quality API delivery. Douglas discussed how API contracts serve as agreements between producers and consumers, detailing expectations for functionality and structure. He outlined four key areas for API testing: validation of the API definition against the specification, adherence to industry standards, alignment with end-user experience, and governance validation to ensure consistency with business needs. By using tools like Postman's linter and governance features, teams can improve synchronization and trust across development and business units, thereby enhancing the overall user experience and ensuring that APIs are built to be intuitive and reliable. The presentation included demos showing how these validations can be implemented in Postman using OpenAPI specifications, contributing to a more streamlined and confident development process.

APIs play an increasingly crucial role in modern web and mobile development, enabling developers to access a variety of functionalities and data without starting from scratch, thereby facilitating the integration of different systems and services. A list of the most popular APIs in the Public API Network has been compiled based on quality standards and usage metrics, such as the number of forks, highlighting APIs like Salesforce, Twitter, WhatsApp, PayPal, and Stripe. These APIs provide diverse functionalities, such as accessing and manipulating data, managing customer interactions, and processing payments, making them invaluable tools for developers looking to enhance their applications. The Postman platform offers an accessible way for developers to explore and implement these in-demand APIs by forking them into their own workspace, which can streamline the process of adding new capabilities to applications.

Postman is a popular tool for API testing, allowing users to write tests to ensure APIs function as expected, verify integrations, and confirm that changes haven't broken existing features. Tests are written in JavaScript using the pm.test() method, which includes a test name and specifications for assertions using a Chai.js BDD syntax. Test results indicate pass or fail status, and examining assertion error messages helps identify issues. When a test fails, it may require updates from either the API producer or consumer to align expectations, serving as a communication tool about API behavior. To improve test readability, users are encouraged to group related assertions, use descriptive test names, and add console statements for clarity. The article emphasizes ensuring tests can fail to validate their robustness and suggests exercises for users to practice intermediate techniques.

GoCardless aims to simplify bank-to-bank payments by integrating traditional Direct Debit systems with innovative open banking technologies, providing a streamlined API that supports both legacy and modern payment methods. Their Postman Collection and sandbox environment offer an accessible way for both technical and non-technical users to test and interact with their API, enabling users to create dynamic billing requests that support global payments. The platform leverages customer mandates, allowing merchants to automatically pull funds via Direct Debit, while also facilitating instant payments through open banking protocols for time-sensitive transactions. GoCardless’s API is designed to be flexible and future-proof, allowing for customized payment flows and seamless integration with existing systems, while Postman's tools enhance user understanding and exploration of payment capabilities.

Postman's latest release introduces a new integration with Azure Pipelines, enhancing the capabilities of developers using Azure DevOps by allowing seamless monitoring of pipeline runs and execution of Postman test collections with minimal setup. This addition complements Postman's suite of API lifecycle management tools, which have been progressively enriched, including last year's introduction of Git-aware API definition editing and a new CLI for contract testing. The integration with Azure Pipelines, along with existing connections to Azure Repos and Azure API Management, provides an end-to-end Azure solution, enabling users to view and filter pipeline runs, incorporate the Postman CLI for automated testing, and access detailed results directly within the pipeline environment, thus offering a more comprehensive experience for API developers.

Postman has enhanced its API platform by introducing templating support in mock servers, allowing users to receive contextual responses to mock requests efficiently. This feature enables developers to define collection examples using template helpers like $body, $queryParams, $pathSegments, and $headers, which provide access to request data sent to the mock server. Object-path syntax can be used to access specific values, and default values can be assigned if variables cannot be resolved. To utilize these capabilities, users need to create a collection, add a request, define an example using the helpers, create a mock server, and then call the mock server with various request data combinations.

Karthikeyan KC, a product manager at Signeasy, discusses the increasing need for businesses to digitize core workflows, particularly contract workflows, to stay competitive in the digital age. Signeasy offers a robust API eSignature solution that automates the signing process, providing a seamless, compliant, and cost-effective service that integrates easily into existing applications. This solution is particularly beneficial for global businesses like Rappi and Truepill, reducing the time required for signature processes significantly. Through a step-by-step guide, developers can quickly set up and test the Signeasy API using tools like Postman, facilitating rapid integration of eSignature capabilities into their systems. The Signeasy API supports various advanced features, such as merge field automation and bulk signing, enabling businesses to automate and enhance their eSignature workflows across multiple departments efficiently.

Klaviyo, a marketing automation software firm focused on ecommerce and retail, has embarked on a significant API overhaul to become an API-first platform, launching new APIs that utilize REST with JSON:API to enhance developer experiences. Spearheaded by CTO Allen Chaves, the initiative aimed to address limitations of previous APIs, such as performance issues and the absence of rate limits, by introducing features like per-endpoint rate limits, improved filtering, and the ability to include multiple resources in a single response. The project involved forming an API Review Council and creating guiding principles to ensure APIs are use-case driven and expose primitives that developers can leverage. Automation played a crucial role, with the OpenAPI specification used to keep documentation and SDKs up to date automatically. Klaviyo also conducted extensive alpha and beta testing to gather feedback, although participation was limited. This API transformation allows developers to make more efficient requests, retrieve necessary data with greater precision, and lays a robust foundation for scaling future data-driven applications.

Mark Winteringham, a tester and author, shares creative ways to leverage the Postman API Platform to enhance exploratory testing, particularly when working with APIs. He discusses four innovative strategies: using Postman for fuzz testing to understand API behavior with various data inputs, employing Postman Flows to efficiently generate test data without disrupting the testing process, utilizing Postman's Monitor feature to create feedback loops for error detection, and applying Postman's mocking service to simulate different API states and observe outcomes. These techniques, demonstrated using the Restful-Booker-Platform collection, emphasize the potential of Postman not just for automation, but as a tool to support and enrich the exploratory testing process, offering testers the ability to learn more quickly and adapt their strategies based on test outcomes.

The 15 Days of Postman is a structured challenge designed for API testing professionals, providing an opportunity to enhance their Postman skills through a series of daily tasks over a 15-day period. Participants are expected to spend 5 to 45 minutes each day exploring various topics such as constructing test suites, increasing test coverage, and automating testing, with the ultimate goal of earning a 15 Days of Postman badge. This intermediate-level challenge, suitable for novice testers with a basic understanding of programming and JavaScript, involves completing all 15 tasks, some of which build on concepts introduced earlier in the series. Participants must work in a public Postman workspace to validate their solutions, and they are encouraged to use their personal accounts if company policies restrict public workspaces under team profiles. Upon completing each task, users validate their solutions themselves before submitting the final challenge to the Postman team to claim their badge.

Postman Flows, a visual programming language for APIs, has gained attention with its early access offered to students worldwide, culminating in a hackathon hosted by Postman Student Programs on Discord. During the event, participants were tasked with creating unique and well-documented Flows using the Postman Flows beta feature, competing for prizes such as gift cards, blog features, and livestream demos. Among the winners were Pratik Pakhale with "Spotify x Twitter," which integrates Spotify and Twitter APIs to tweet a pie chart of a user's top tracks, Rohit Purkait's "API 101 Jokes Flow," which helps visualize API 101 content for Postman Student Leaders, and Chintan Patel's "Get Answers in One Sentence," which uses OpenAI and Slack APIs to deliver concise answers to prompts in Slack channels. These projects highlight the versatility of Postman Flows in simplifying complex API interactions and enhancing the learning experience for participants, who gained practical skills in using multiple APIs and building workflows. The hackathon not only showcased creativity but also provided valuable insights into the practical applications of Postman Flows, encouraging further exploration and educational opportunities through Postman Student Programs.