March 2023 Summaries

During a recent livestream, the host collaborated with Jan Schenk and Saswat Das from Postman to showcase the integration of AI tools for controlling IoT lights. They utilized Postman Flows, a visual programming language, to automate interactions by combining Postman Collection requests. The project involved using OpenAI's ChatGPT API to generate responses, which were then analyzed using Microsoft's Azure Cognitive Service for sentiment analysis. The sentiment scores guided the control of Jan's custom-built IoT light panel, which was capable of displaying programmed "reaction" images based on the sentiment results. This involved sending sequential requests to the light panel for each sentence's sentiment and an overall sentiment score. The process was demonstrated live, highlighting real-time debugging and collaboration using Postman Collections and Flows. The session emphasized the potential of combining AI and IoT technologies to create interactive and responsive systems, while also engaging a global audience through live demonstrations.

The API lifecycle involves a structured process of designing, developing, deploying, and consuming APIs, which enhances productivity and ensures the delivery of high-quality APIs. A stable API lifecycle is crucial for effective API governance, providing stage-specific policies that support collaboration and maximize an organization's API value. GraphQL, a flexible and efficient query language, integrates seamlessly into this lifecycle, allowing clients to request specific data and adapt APIs without versioning, thus ensuring backward compatibility. Key phases include defining the API schema using GraphQL's Schema Definition Language, querying with GraphQL's strongly typed language, implementing server-side code, and evolving APIs without breaking existing functionalities. Tools like Postman's GraphQL client facilitate clean query writing, automated testing, and interactive documentation. This enables developers to publish APIs on networks for broader discovery and consumption. Monitoring and scaling are essential post-launch steps, with GraphQL's features like batching and caching aiding in performance and load management.

The collection format specification in Postman defines the structure and details of Postman Collections, including requests, authorizations, HTTP headers, and example responses. It enhances the functionality of collections by allowing for auto-generated request headers that are added at runtime and not included in the exported JSON. Variables in Postman Collections have different scopes, with only collection variables being exported, while global and environment variables are referenced but not declared. Cookies are added to request headers with the cookie key, rather than being part of the request object. Scripting capabilities are expanded through the collection format specification, enabling multiple pre-request and test scripts to be included in an event list, offering flexibility in enabling or disabling scripts and managing version control. Scripts in exported collections can be externally hosted and referenced, although Postman itself does not support external script referencing. The collection format specification documentation provides further insights into the units of a collection and the tools available for building enhanced functionalities.

An effective API-first design is characterized by its reusability, interoperability, modifiability, user-friendliness, security, efficiency, and alignment with organizational goals, which collectively enhance its contribution to a business's value. To achieve this, the design process should incorporate five key actions: using natural language for need analysis, observing context to identify constraints, thoroughly documenting APIs, leveraging existing APIs and guidelines, and integrating feedback loops. Utilizing natural language helps in aligning API features with organizational needs, while context observation ensures design pragmatism and security. Comprehensive documentation, aided by specifications like OpenAPI and tools like Postman, ensures all requirements are captured. Existing APIs and guidelines streamline decision-making by providing established design patterns, while feedback loops, both automated through API linting and human, ensure iterative improvements and alignment with user expectations. This framework not only aids in creating efficient and secure APIs but also focuses on developing the right API without unnecessary distractions.

Postman has announced that the creators of Microcks, Laurent Broudoux and Yacine Kheddache, have joined the Postman Open Technologies team to enhance their multi-protocol API testing and mocking capabilities. Microcks is recognized as a leading enterprise-grade testing and mocking solution for APIs, supporting protocols such as REST, gRPC, GraphQL, and others. This partnership aims to integrate Microcks' expertise into Postman's platform to improve testing, contract mocking, and governance across diverse API landscapes. Postman, known for its investments in tools like AsyncAPI and JSON Schema, plans to incorporate Microcks into its formal governance program, leveraging the duo's experience to strengthen their platform's capabilities and continue supporting the open source community. This collaboration is expected to advance the quality, productivity, and governance of API operations while maintaining the integrity of Microcks' ecosystem.

Postman Flows represents a significant advancement in software development by providing a visual and collaborative tool for building API-driven applications, allowing users to connect APIs as building blocks in a visually intuitive manner. This innovation enhances the development process by simplifying complex tasks related to modern software construction, such as deployment, scaling, and integration of various API-enabled services, which form the backbone of the API economy. With Postman Flows, users, including students and educators, can bypass extensive traditional learning curves to create workflows, data analyses, and API applications effectively, thereby democratizing access to sophisticated software development. As a part of the Postman API Network, Flows offers an infinite canvas for collaborative development, making the creation of software more connected and immersive, and it is available across all Postman plans with usage-based pricing for advanced features.

Postman Flows is a versatile, low-code tool designed to simplify API workflows for users across various technical backgrounds, including business professionals, product managers, and DevOps professionals. By utilizing a visual interface that relies on drag-and-drop blocks, users can efficiently create and manage API projects without extensive coding knowledge. For business professionals, it offers pre-built collections and examples to automate manual processes, while product managers benefit from clearer communication and rapid prototyping capabilities. DevOps professionals can automate and customize workflows to streamline tasks such as onboarding and post-deployment processes. Postman Flows thus enhances team collaboration and efficiency, contributing to improved customer products and services by addressing the needs of these distinct user groups.

Amid growing environmental concerns, individuals are increasingly seeking ways to reduce their carbon footprint, with Earth Hour—an annual event encouraging people to turn off their lights for one hour—serving as a symbolic gesture of sustainability. APIs available in the Postman Public API Network offer a practical solution for automating smart lights to participate in Earth Hour, even if one forgets to do so manually. Popular APIs such as the Philips Hue API, Elgato Key Light API, and Govee Developer API enable users to control various aspects of their smart lighting systems, providing an opportunity to signify support while potentially reducing electricity costs. Additionally, the EcoMetrics API offers insights into the environmental impact of these actions, encouraging further steps towards sustainability. As Earth Hour approaches, utilizing these tools not only contributes to the event's success but also promotes continuous environmental consciousness and action.

Postman, a leading API development platform used by over 25 million developers, is enhancing its capabilities to streamline the import workflow for APIs across various formats. The platform aims to become a comprehensive API solution by improving the import feature, which is crucial for developers during various stages of API development, such as writing test cases or integrating third-party APIs. Recent improvements include the ability to convert cURL commands directly in the address bar, import collections via a single-click JSON feature, and simplified drag-and-drop functionality. These updates are part of a broader initiative to make the platform more intuitive and efficient, with ongoing efforts to resolve user feedback from GitHub and plans for further enhancements, including seamless import flows and additional language support for Codegen in future releases.

Postman's recent enhancements to its API governance tools aim to provide organizations with a streamlined, flexible approach to managing their API landscapes. The introduction of an enhanced rule library and a new rule creation experience allows users to set up governance programs with industry best practices and easily define custom governance rules without extensive prior knowledge. The platform's new features, such as workspace groups, accommodate varying standards across different teams and API maturity levels, enabling enterprises to manage API governance at scale efficiently. These improvements reduce the time individual developers and governance leaders spend on ensuring compliance and documentation, allowing them to focus on defining applicable governance rules, thereby supporting the broader shift towards API-centric software development.

Postman has introduced new features to enhance the efficiency of managing variables, applicable across collection, environment, and global variables. Users can now sort and filter variables based on name, value, or type, which simplifies the process of locating specific variables, particularly for those managing a large number of them. Additionally, the variable loading speed has been significantly optimized, reportedly up to ten times faster, reducing wait times and allowing users to focus on their tasks more quickly. These improvements aim to make the experience of working with variables more seamless and encourage users to try the enhanced features and provide feedback.

Designing and building APIs involves not only technical challenges but also addressing the needs of various stakeholders, including consumers, partners, and different departments within a company. To facilitate broader collaboration beyond direct teams, Postman introduces a new "Guest" role feature that allows users to share specific API collections with individuals across the organization. This feature enables Guests to have view-only access to shared collections, permitting them to send API requests without the ability to modify or export them, unless they request editing access. The Guest access is part of Postman's Team and Enterprise plans, and while Guest users are free, there is a cap on their number based on the plan. Postman team Admins can manage Guest access via the team dashboard, promoting easier collaboration with stakeholders such as QA, sales, and customer support.

Postman v10 introduced Partner Workspaces, allowing users to collaborate with external partners by sharing workspaces that include API code, documentation, tests, and mocks, enabling real-time updates and collaboration across organizational boundaries. While some teams have effectively used this feature for co-development, feedback revealed that many customers prefer to securely share API collections and documentation with partners who only need view-only access. To accommodate these needs, Postman has made the Partner Viewer license free for Enterprise plan users, allowing partners with Viewer roles to access and provide feedback without incurring additional costs. Enterprise teams are only charged for partners when they are given Editor roles, which allows comprehensive workspace access, and for a limited time, up to three partner Editors can be invited for free.

As the proliferation of mobile and web applications continues, the demand for robust security measures grows, highlighting the importance of application security APIs in safeguarding these platforms. These APIs, available in the Public API Network, offer developers essential tools and protocols for integrating security features into applications. Notable examples include Datadog's APIs for security monitoring, incident management, and identity access control, Intel® SecL-DC's API for hardware-based security like secure boot and encryption, and Warrant’s API for incorporating strong authentication and authorization. Akamai provides APIs to counteract threats such as bot and malware attacks, while PingOne offers solutions for identity and access management along with multi-factor authentication. Postman recommends exploring and forking these high-quality APIs for enhanced security integration, underscoring their utility in providing scalable, secure solutions across various digital environments.

OAuth 2.0 is a widely used open-standard protocol for authorization that enhances API data security by allowing third-party applications to access user data without requiring the sharing of credentials. It involves roles such as the resource owner, resource server, client, and authorization server to facilitate secure access through access and refresh tokens, with JSON Web Tokens being a common format for these tokens. This process includes obtaining a client ID and secret, requesting user authorization, and using generated tokens to access resources, all while ensuring user control over data access. The guide also demonstrates using Postman to access Google APIs, specifically the Google Sheets API, highlighting steps to set up a project, obtain credentials, authorize with Postman, manage tokens, and revoke access if needed. The tutorial emphasizes secure practices like storing sensitive information in variables and provides resources for further learning.

At the 2022 API Specifications Conference, Ben Hutton, Postman JSON Schema Specification Lead, highlighted the practical applications and benefits of using JSON Schema in production across various organizations. Although JSON Schema was originally developed for JSON data validation, its extensive language support has enabled diverse applications, including code and form generation. Despite misconceptions about its readiness for production use, many large organizations have successfully implemented JSON Schema, resulting in streamlined processes and enhanced efficiency. For example, Cookpad Mart in Japan achieved complete accuracy in quality assurance data submissions, while Tyler Technologies empowered clients with self-service form customization. Zapier improved the validation process for app integrations, and 6 River Systems facilitated seamless communication between autonomous robots and control centers. These cases illustrate that JSON Schema can lead to significant improvements in development speed, data validation, and inter-system communication, proving its robustness and utility in production settings.

Postman has revamped its documentation for Postman Collections, transforming it from a reference-based approach to a more intuitive, walk-through format that enhances learning and understanding. The updated documentation, now hosted on the Postman Learning Center, offers an improved user experience with enhanced SEO for better visibility. It provides a new look and flow similar to the Learning Center's structure, and includes sections like Getting Started, Concepts, and References, each designed to guide users through creating and managing API collections. The documentation now compares how collections are represented in the specification versus Postman, and includes multiple reference formats such as tables, diagrams, and JSON Schema. Future updates will expand on the tools available for running collections and converting them to other specifications, with further details to be shared on the Postman blog.

Postman Flows aims to empower users to create personalized software without writing code by leveraging APIs, allowing data connection and automation from multiple sources. This tool facilitates task automation and software creation through blocks like "Evaluate" and "If," which assist users in managing data flow and conditions using the Flows Query Language (FQL). The latest updates enhance the user experience with features such as autocomplete, live previews of FQL queries, and artificial intelligence support that allows users to input queries in plain text to receive AI-generated suggestions. Postman Flows, now generally available since March 22, 2023, offers an intuitive and powerful way for users to streamline and optimize their API workflows, making it easier for both existing and new users to build faster and smarter workflows.

Postman, with its roots as a side project by CEO Abhinav Asthana, has grown into a key player in the API-first world, fostering an open-source culture by releasing tools like Postman Runtime, Collection SDK, and Newman for flexible API development. The company has engaged in initiatives such as the Google Summer of Code (GSoC), where it mentors new contributors in open source software development. In 2023, Postman continues its advocacy for open-source API technologies through the Postman Open Technologies program, focusing on specifications, standards, tooling, and data. The company actively participates in GSoC by supporting projects related to OpenAPI, AsyncAPI, and JSON Schema, encouraging developers to propose innovative ideas and collaborate through their community forum and GitHub repository. Contributors are invited to join Postman's open-source projects by following guidelines, engaging with mentors, and submitting project proposals during the designated timeline.