July 2023 Summaries

Postman has transformed API testing by providing a robust suite of tools and features that simplify the process, enabling developers to ensure the quality and reliability of APIs through various testing techniques such as end-to-end, regression, integration, contract, and performance testing. End-to-end testing validates entire workflows, while regression testing ensures continued functionality post-updates by verifying elements like status codes and JSON schema adherence. Integration testing checks module compatibility within applications, and contract testing confirms adherence to API specifications. Performance testing assesses how well an API handles different workloads by simulating various user scenarios and measuring key performance metrics. Postman’s example collections and automation tools, such as the CLI and scheduled runs, assist in efficiently executing these tests, empowering teams to maintain and improve API standards effectively.

Postman facilitates the development and management of APIs by offering tools for designing, documenting, testing, and monitoring them. The Postman API extends these capabilities by allowing users to manage their API versions and synchronize documentation with code more efficiently. Through endpoints like "Get an API," "Create or update a schema file," and "Create a version," users can automate the process of updating and publishing new API versions. The guide suggests employing Semantic Versioning to manage API versions, ensuring users understand the nature of changes in each release. Additionally, GitHub actions can be integrated to automate the synchronization of OpenAPI definitions with Postman, allowing developers to manage API updates directly from their GitHub repositories. By configuring a GitHub workflow with a valid Postman API key and necessary repository variables, developers can execute these actions seamlessly, either manually or through automation, to keep their APIs up-to-date and in sync with their codebase.

Tomorrow.io and Postman are hosting the Harness the Weather Hackathon with a top prize of US$1,000, and this blog post is part of a series intended to inspire participants with creative ideas. The focus of this post is on utilizing Tomorrow.io's advanced alerting system, which allows users to subscribe to weather advisories and specific locations with ease. The tutorial guides users through setting up alerts for winter weather hazards, demonstrating how company staff in Boston can be notified via Slack. The process involves obtaining an API key, building alert parameters, and linking these alerts to predefined locations. Users are shown how to configure a webhook URL to listen to and distribute notifications through channels like Twilio for text alerts or Slack for office notifications. Participants are encouraged to experiment with these tools and create innovative projects for the hackathon, with the opportunity to win significant prizes when winners are announced at ClimaCon.

Nikki Siapno, co-founder of Level Up Coding, discusses the importance of thorough testing in software development to ensure system quality, reliability, performance, and security. The article explores three essential types of tests: performance, load, and stress testing, each focusing on different aspects of system evaluation. Performance testing identifies and removes bottlenecks by assessing system efficiency under varying conditions, while load testing examines a system's scalability and capacity during peak activity periods. Stress testing pushes systems beyond normal limits to assess stability and fault tolerance, promoting a culture of defensive programming. The article emphasizes the importance of understanding system objectives, user behavior, and potential bottlenecks to create effective test scenarios. It also highlights the need for an appropriate testing environment and systematic analysis of test results to drive system improvements and maintain relevance. Through these practices, teams can develop optimized, efficient systems that align with business goals and adapt to evolving technological demands.

Tomorrow.io has partnered with Postman to host the Harness the Weather Hackathon, which runs until August 1, 2023, offering a top prize of $1,000. The event highlights the capabilities of Tomorrow.io's Weather API, designed to provide ultra-accurate weather data through user-friendly endpoints. The API allows developers to enhance their applications with features such as weather alerts and future event predictions. A tutorial within the blog post demonstrates how to use the API to create a weather app using Postman, employing a single API call to obtain weather data for a specific location, exemplified by Times Square in New York City. The process involves acquiring an API key, selecting location coordinates or a predefined location, requesting specific weather data fields, choosing units, configuring time intervals and zones, and executing a request to retrieve and use the weather data. The hackathon encourages participants to create innovative projects using the API, with the possibility of winning prizes announced at ClimaCon.

Postman has acquired Akita, a company focused on providing automated, eBPF-based API discovery and monitoring solutions, to enhance its API platform with improved API observability capabilities. Akita's technology simplifies the process of understanding and monitoring APIs in production by passively observing API traffic, eliminating the need for additional frameworks or SDKs. This acquisition aligns with Postman's goal of providing developer-first tooling and addressing the challenges faced by larger companies in maintaining a central source of truth for their APIs. Akita's founder, Jean Yang, recognized the synergy between the two companies and the potential to achieve their objectives more quickly by integrating with Postman's platform. The collaboration aims to assist developers in managing both modern and legacy APIs, thereby improving software understanding, issue resolution, and overall customer satisfaction.

A new integration between Postman and GitLab Secret Detection has been announced, aimed at protecting Postman API keys in public GitLab repositories. When a Postman API key is accidentally committed to a public repository on GitLab.com, the Secret Detection service scans for secrets like these and notifies both GitLab and Postman. In turn, Postman sends an email alert to the user, advising them to delete the compromised key and generate a new one to secure their data. This feature is available to all Postman users and is currently operational in GitLab Ultimate projects that have enabled Secret Detection. Users are encouraged to verify their email addresses with Postman to ensure they receive critical security alerts, and they can visit the Postman Trust Center for additional information on organizational security measures.

The recent launch of the Postman VS Code extension has been enhanced with the addition of key features such as collections and environments, based on user feedback from the API community. These features allow users to save and access their HTTP requests within collections and store variables for testing and documenting APIs across multiple environments, significantly improving the ease of developing high-quality APIs. The extension enables collaboration through Postman workspaces, allowing users to share their collections with teammates for validation, testing, or integration. The extension, currently in early access, continues to evolve with more capabilities being developed based on user input.

broadpeak.io, a video API platform, has enhanced its user interaction by integrating with Postman, a tool that simplifies API learning and testing through visual development. This integration allows users to explore broadpeak.io’s APIs without coding, make fewer manual API requests, and access demo "recipes" for rapid testing of scenarios like creating virtual channels in HLS or DASH. Users can fork broadpeak.io collections into their Postman workspace, add their API keys, and interact with the APIs efficiently, with the option to build custom workflows by chaining API calls. The Postman integration complements broadpeak.io’s existing API Reference and aims to facilitate API familiarity and interaction, inviting users to contribute feedback and share their own API usage recipes with the community.

The text explores the use of REST and WebSocket protocols in connected home environments, highlighting their distinct characteristics and use cases. REST operates on a request-response pattern suitable for non-real-time data updates, such as turning on smart devices, while WebSockets facilitate bidirectional, real-time data transmission, ideal for continuous data monitoring and live dashboard displays. It introduces Home Assistant, an open-source home automation platform offering both REST and WebSocket APIs, allowing users to control and monitor various smart devices from a unified interface. The text details how to authenticate and utilize Home Assistant's WebSocket API using Postman, emphasizing its customization capabilities for home automation scenarios. It also provides resources for further exploration of WebSockets and encourages readers to share their own WebSocket projects and interests.

The Harness the Weather Hackathon, organized by Postman and Tomorrow.io, invites participants to innovate with weather data through the development of backend applications using Tomorrow.io’s Weather API. Running until August 1, 2023, the hackathon challenges developers to create scalable and practical solutions that transform industries by utilizing real-time, forecast, and historical weather data. Participants are required to submit a Postman Collection that includes detailed code guides and demonstrates creative uses of the API. Submissions will be judged on criteria such as innovation, real-world impact, and effective use of the API's features, with winners receiving prizes, recognition at ClimaCon, and exposure on social media channels. The hackathon aims to showcase the power of weather data in solving real-world problems, offering an opportunity for developers to contribute to a weather-informed future.