[BreizhCamp, format 15min] Construire et automatiser l'ecosystème de son SaaS grâce à une spécification OpenAPI

•

2 likes•2,581 views

This document discusses building and automating an API ecosystem for a SaaS application using OpenAPI (Swagger) specifications. It describes using Swagger to generate API documentation, input validation, client libraries, and other components. The solution involves defining the API in a single Swagger specification file and using CI/CD pipelines to automatically generate documentation, tests, client libraries and other code artifacts from that file on each release.

Technology

Construire et automatiser l’écosystème de son
SaaS grâce à une spéciﬁcation OpenAPI (Swagger)

François-Guillaume Ribreau
—
Ex-Bringr cofounder & CTO

François-Guillaume Ribreau
—
Ex-Bringr cofounder & CTO
Ex-Architect @iAdvize

François-Guillaume Ribreau
—
Ex-Bringr cofounder & CTO
Ex-Architect @iAdvize
Architect & Head of development @Ouest-France

François-Guillaume Ribreau
—
Ex-Bringr cofounder & CTO
Ex-Architect @iAdvize
Architect & Head of development @Ouest-France
🌟 Founded @imagecharts @Redsmin @mailpopin

https://chart.googleapis.com/chart?cht=p3&chd=t:
60,40&chs=500x500&chl=Hello|World

https://chart.googleapis.com/chart?cht=p3&chd=t:
60,40&chs=500x500&chl=Hello|World
<img src=“https://chart.googleapis.com/chart?…” />

One rule: Automate, automate, automate.
๏API Documentation
๏API GUI client (APIGee like)
๏API Input Validation
•Plugins ecosystem
•Client libraries
Checkpoint

Single Source of Truth + Input Validation

Release pipeline
SCM CI CD image-charts.com
enforce code-cov. >98% (nyc)
update deps (updtr) + commit
daily build

✓API Documentation
✓API GUI client (APIGee like)
✓API Input Validation
?Plugins ecosystem
?Client libraries
Checkpoint

npm run --silent download-swagger
// curl -s https://image-charts.com/swagger.json > scripts/swagger.json
CI

npm run --silent download-swagger
// curl -s https://image-charts.com/swagger.json > scripts/swagger.json
&& npm run --silent generate
// node scripts/generateREADME.js > README.md
// && node scripts/generateComponent.js > src/index.js
// && babel src/index.js > lib/index.js
CI

scripts/model.js
scripts/generateComponent.js

Release pipeline
SCM CI CD image-charts.com
….

Release pipeline
SCM CI CD
CDCI mjml-chart
image-charts.com
Plugins
ecosystem
download swagger
generate lib
update deps
run tests
changelog
release
….

docker 🐳
swaggerapi/swagger-generator
:8080
curl localhost:8080/api/gen/clients | jq.node 'join("n")'

Release pipeline
SCM CI CD
CDCI mjml-chart
image-charts.com
Plugins
ecosystem
…

Release pipeline
SCM CI CD
CD
github.com/image-
charts/lib-...CI
CI
CD
mjml-chart
image-charts.com
Client
libraries
Plugins
ecosystem
…

✓API Documentation
✓API GUI client (APIGee like)
✓API Input Validation
✓ Plugins ecosystem
~ Client libraries
Checkpoint
#FAIL

Free plans for Redis
administration & monitoring
at redsmin.com
Questions?
@FGRibreau
No more server-side rendering pain,
1 url = 1 chart
image-charts.com

Free plans for Redis
administration & monitoring
at redsmin.com
We are looking for Front-end Developers
twitter.com/iadvizetech
Questions?
@FGRibreau
No more server-side rendering pain,
1 url = 1 chart
image-charts.com

https://getnobullshit.com/ Nous savons tous développer une API mais avons-nous bien intégré toutes les problématiques? Son aspect organisationnel et humain, sa gouvernance, ses contraintes business et d'opérabilité (SLA, SLO, SLI), son release management, ses méthodes de requêtage, sa sécurité (ses performances, sa mise à l'échelle), ses différents types de test, sa documentation, son versioning (compatibilité, changelog), son monitoring — et bien plus encore — de cette API une fois en production ? Durant ce talk, c'est plus de 30 points d'attentions rarement évoqué que je vous propose d'aborder, à la lumière de retours d'expériences provenant de tech-leader comme Uber, Stripe, Facebook et Google mais aussi d'entreprise française de la petite startup à la PME.

Choisir entre une API RPC, SOAP, REST, GraphQL?  Et si le problème était ai...

François-Guillaume Ribreau

He stopped using for/while loops, you won't believe what happened next!

François-Guillaume Ribreau

Derrière ce titre putaclic se cache une réalité pour une partie de notre industrie. Les boucles for/while sont des structures itératives proposant le plus bas niveau d'abstraction. Les langages modernes proposent encore de nos jours ces structures car elles ont leur utilité dans quelques cas exceptionnels. Ces 10 dernières années, de nouvelles structures d'itérations sont apparues, proposant un plus haut niveau d'abstraction : donc une meilleure productivité, moins de ligne de code, donc moins de bug potentiels (que nous décrirons). Nous partirons d'exemples de code simple et montrerons leur équivalent via ces nouvelles structures puis observerons les avantages (et inconvénients ?). Les exemples seront en JavaScript mais bien entendu applicable dans d'autres langages (Java, C#, Python, Ruby, C++, Scala, Go, Rust, ...).

Use groovy & grails in your spring boot projects

Fátima Casaú Pérez

GR8Conf 2015 - Spring Boot and Groovy. What more do you need?

Iván López Martín

Spring Boot allows the creation of Spring Framework based applications in a quick and easy way without any XML configuration. It does not generate code, but provides useful defaults and an opinionated approach to the configuration but it quickly gets out of the way when we want to change and override the configuration. As if this wasn't enough we can also create production-ready applications with features such as metrics, health checks and externalized configuration. If you add Groovy you have the perfect combination to speed up your development and have fun while developing. In this talk you will see introductory examples of Spring Boot, the creation of a small RESTful API, the usage of Websockets, some of the Spring Boot CLI goodness... and many more examples!

Building robust REST APIs

Nejc Zupan

This talk will showcase how to use pyramid_openapi3 for building robust RESTful APIs. With only a few lines of code you get automatic validation of requests and responses against an OpenAPI v3 schema. You also get automatically generated “try-it-out” style documentation for your API. It is a nice walkthrough of pyramid_openapi3. With a defense of design decisions and a few tales from the battleground.

React Native "A Bad Idea Or A Game Changer" at Code Mania 101

Ranatchai Chernbamrung

Adoptar o implementar nuevas tecnologías a nuestros sistemas basados en Java tiene muchos ángulos de análisis que van más allá de lo técnico. En esta sesion veremos 10 formas prácticas y efectivas en las que puedes contribuir activamente en el ecosistema Cloud Native de Java con JakartaEE y Apache TomEE. Con esta información podrás tomar mejores decisiones en las mejoras continuas de tus arquitecturas y sistemas basados en java.

Use Groovy&Grails in your spring boot projects

Paradigma Digital

Greach es el evento sobre tecnologías basadas en lenguaje Groovy referente en España. Dentro de este evento, la charla 'Use Groovy & Grails in your Spring Boot projects' se presenta como una propuesta de ejemplos y posibilidades de introducir este lenguaje y algunos módulos del framework Grails (basado también en Groovy) en proyectos implementados con la reciente solución lanzada por Spring llama Spring Boot. More info: http://buff.ly/1DXXQWU

Bootiful Development with Spring Boot and Angular - Spring I/O 2017

Matt Raible

To simplify development and deployment, you want everything in the same artifact, so you put your Angular app “inside” your Spring Boot app, right? But what if you could create your Angular app as a standalone app and make cross-origin requests to your API? A client app that can point to any server makes it easy to test your current client code against other servers (e.g. test, staging, production). This workshop shows how to develop with Java 8, Spring Boot, Angular 4, and TypeScript. You’ll learn how to create REST endpoints with Spring MVC, Spring Data REST, configure Spring Boot to allow CORS, and create an Angular app to display its data. If time allows we’ll cover microservices, security/authentication, continuous integration, and deployment to Cloud Foundry. Prerequisites: Java 8, Maven 3.5.0, Node.js 6.9.5, Chrome (higher versions ok) Install Angular CLI: npm install -g @angular/cli Optional: Yarn instead of npm Tutorial used for workshop: http://developer.okta.com/blog/2017/04/26/bootiful-development-with-spring-boot-and-angular

Metasepi team meeting #16: Safety on ATS language + MCU

Kiwamu Okabe

Spring IO '15 - Developing microservices, Spring Boot or Grails?

Fátima Casaú Pérez

Testing Angular Applications - Jfokus 2017

Matt Raible

The best reason for writing tests is to automate your testing. Without tests, you'll likely be testing manually. This manual testing will take longer and longer as your codebase grows. In this session, you’ll learn how to test an Angular 2 application. You'll learn how to use Jasmine to unit testing components and Protractor for integration testing. We’ll also take a look at code coverage options and explore continuous integration tools. Tutorial: https://github.com/mraible/ng-demo/blob/master/README.adoc Source code: https://github.com/mraible/ng-demo

Breaking News and Breaking Software by Andy Hume

SyncConf

The Guardian publishes around 350 articles of content a day. Hardly 'big data'. We deal with barely 150 million users a month. Facebook (with it's 600 million users on mobile alone), we ain't. But we do have to serve the news, and we do have to serve it fast, accurately, and on time, across multiple platforms and devices. For a company that's 192 years old, we like to think we're pretty Agile. So what do our development teams care about? What kind of qualities are we optimising for in our software and processes? How do we make sure that when the news is breaking, our software isn't broken? Or if it is, how do we fix it fast?

5 best practices for (web/ software) development (2010)

Erwin Elling

PyCon Korea 2019 REST API Document Generation

용선 이

React native

Omid Nikrah

Power of React Native

Murugan Durai

Developing PWAs and Mobile Apps with Ionic, Angular, and JHipster - Devoxx Mo...

Matt Raible

In this session, I show how to build a Progressive Web App (PWA) AND a mobile app using Ionic, Angular and JHipster. PWAs are being hyped as the next big thing in mobile development. This talk describes the trials and tribulations of developing the Ionic Module for JHipster. It will show how you can easily generate Ionic UIs and describe the pain points of working with Node and Yeoman to develop this module. My Dev Story about Ionic for JHipster on YouTube: https://www.youtube.com/watch?v=B7TjR_rJVeU

Cloud Native Progressive Web Applications - Denver JUG 2016

Matt Raible

In this session, we covered how to build microservices with Spring, deploy them to the cloud and expose their functionality with an progressive web application that can run offline. You’ll learn how to “build to fail” and create a quality, resilient application. Live coding will show how to use: Spring Boot, Spring Cloud, Spring Security, Cloud Foundry, IntelliJ IDEA, Angular 2, JWT, Stormpath, and Progressive Web Apps.

We Are Developers - Modern React (Suspense, Context, Hooks) - Roy Derks

Roy Derks

Building a PWA with Ionic, Angular and Spring Boot - Jfokus 2017

Matt Raible

In this session, you'll learn how to build a Progressive Web App (PWA) using Ionic, Angular and Spring Boot. PWAs are being hyped as the next big thing in mobile development. This talk will cut through the hype and get down to the nitty-gritty. Are they really better than native applications? Can you develop PWAs and easily target mobile and desktop with the same application? Tutorial: https://github.com/stormpath/stormpath-spring-boot-ionic-example/blob/master/TUTORIAL.md Source code: https://github.com/stormpath/stormpath-spring-boot-ionic-example

Testing Angular 2 Applications - Rich Web 2016

Matt Raible

The best reason for writing tests is to automate your testing. Without tests, you'll likely be testing manually. This manual testing will take longer and longer as your codebase grows. In this session, you’ll learn how to test an Angular 2 application. You'll learn how to use Jasmine to unit test components and Protractor for integration testing. We’ll also take a look at code coverage options and explore continuous integration tools.

What's New in JHipsterLand - DevNexus 2017

Matt Raible

Grails Spring Boot

TO THE NEW | Technology

This tutorial is about Spring Boot. The tutorial includes an introduction to Spring Boot, key features of Spring Boot, prototyping using CLI, managing profiles aka environment in Grails, using GORM and using GSP. The tutorial begins with a section which is an introduction to Spring Boot. It includes an introduction to Spring Boot, the benefits of using Spring Boot. Following is a features section which includes the key features of Spring Boot like embedded servers, security, metrics etc. Next is a section about prototyping. It includes prototyping using CLI, getting started, the things that happen during prototyping, starter POMs and a demo, building Gradle, using plugin and adding dependencies, and hot reloading. Consecutively there is a section about managing profiles. It includes managing profiles aka managing environment in Grails like binding properties and its examples, using spring data to add dependency. Moreover, there's also a section which includes using GORM for next level persistence and also includes server side view template libraries like JSP, velocity, tiles, GSP etc. The last section of this tutorial is about GSP. It includes using GSP with Spring Boot as it has limited tags, adds dependency and helps in packaging executable JAR and WAR files.

20180524 Android Taipei : RxJava Threading

PRADA Hsiung

RPM experiments

Julien Pivotto

Quest for the Perfect Workflow for McrFREDAndi Smith

What's hot

Rapid development with angularHongbiao Chen

Aprende, contribuye, y surfea Cloud Native Java - GuateJUG 2021

César Hernández

Use Groovy&Grails in your spring boot projects

Paradigma Digital

Bootiful Development with Spring Boot and Angular - Spring I/O 2017

Matt Raible

Metasepi team meeting #16: Safety on ATS language + MCU

Kiwamu Okabe

Spring IO '15 - Developing microservices, Spring Boot or Grails?

Fátima Casaú Pérez

Testing Angular Applications - Jfokus 2017

Matt Raible

Breaking News and Breaking Software by Andy Hume

SyncConf

5 best practices for (web/ software) development (2010)

Erwin Elling

PyCon Korea 2019 REST API Document Generation

용선 이

React native

Omid Nikrah

Power of React Native

Murugan Durai

Developing PWAs and Mobile Apps with Ionic, Angular, and JHipster - Devoxx Mo...

Matt Raible

Cloud Native Progressive Web Applications - Denver JUG 2016

Matt Raible

We Are Developers - Modern React (Suspense, Context, Hooks) - Roy Derks

Roy Derks

Building a PWA with Ionic, Angular and Spring Boot - Jfokus 2017

Matt Raible

Testing Angular 2 Applications - Rich Web 2016

Matt Raible

The best reason for writing tests is to automate your testing. Without tests, you'll likely be testing manually. This manual testing will take longer and longer as your codebase grows. In this session, you’ll learn how to test an Angular 2 application. You'll learn how to use Jasmine to unit test components and Protractor for integration testing. We’ll also take a look at code coverage options and explore continuous integration tools.

What's New in JHipsterLand - DevNexus 2017

Matt Raible

Grails Spring Boot

TO THE NEW | Technology

20180524 Android Taipei : RxJava Threading

PRADA Hsiung

What's hot (20)

Rapid development with angular

Aprende, contribuye, y surfea Cloud Native Java - GuateJUG 2021

Use Groovy&Grails in your spring boot projects

Bootiful Development with Spring Boot and Angular - Spring I/O 2017

Metasepi team meeting #16: Safety on ATS language + MCU

Spring IO '15 - Developing microservices, Spring Boot or Grails?

Testing Angular Applications - Jfokus 2017

Breaking News and Breaking Software by Andy Hume

5 best practices for (web/ software) development (2010)

PyCon Korea 2019 REST API Document Generation

React native

Power of React Native

Developing PWAs and Mobile Apps with Ionic, Angular, and JHipster - Devoxx Mo...

Cloud Native Progressive Web Applications - Denver JUG 2016

We Are Developers - Modern React (Suspense, Context, Hooks) - Roy Derks

Building a PWA with Ionic, Angular and Spring Boot - Jfokus 2017

Testing Angular 2 Applications - Rich Web 2016

What's New in JHipsterLand - DevNexus 2017

Grails Spring Boot

20180524 Android Taipei : RxJava Threading

Similar to [BreizhCamp, format 15min] Construire et automatiser l'ecosystème de son SaaS grâce à une spécification OpenAPI

RPM experiments

Julien Pivotto

Quest for the Perfect Workflow for McrFREDAndi Smith

フロントエンドエンジニア（仮）〜え、ちょっとフロントやること多すぎじゃない！？〜

Koji Ishimoto

Amped for AMP at Pubcon Las Vegas 2016

Search Commander, Inc.

DevOpsDays Zurich 2023 — Bridging Dev and Ops with eBPF: Extending Observabil...

Raphaël PINSON

eBPF (extended Berkeley Packet Filter) is a powerful and versatile technology that can be used to extend observability in Linux systems. In this talk, we will explore how eBPF can be used to bridge the gap between dev and ops by providing a deeper understanding of the kernel and OS internals as well as the applications running on top. We will discuss how eBPF can be used to extend observability downwards by enabling access to low-level system information and how it can be used to extend observability upwards by providing application-level tracing capabilities.

2015 - Basta! 2015, DE: JavaScript und build

Daniel Fisher

Sie bauen Ihr Backend schon mit einem Build-Server nach aller Kunst der CI? Und wie sieht das mit dem JavaScript-Code aus? Das Bündeln und Minifizieren beispielsweise mithilfe von Uglify und Grunt mit in den Build-Server einzuklinken, ist ja erst der Anfang. Sollte der Build nicht auch "Rot" werden, wenn ein JavaScript-Test von Jasmine fehlschlägt? Ach, und sammeln Sie noch keine Qualitätsmetriken über den clientseitigen Code? Laufen Sie dann nicht Gefahr, in der Scripthölle zu landen?

Serverless in Production, an experience report (AWS UG South Wales)

Yan Cui

AWS Lambda has changed the way we deploy and run software, but this new serverless paradigm has created new challenges to old problems - how do you test a cloud-hosted function locally? How do you monitor them? What about logging and config management? And how do we start migrating from existing architectures? In this talk Yan and Scott will discuss solutions to these challenges by drawing from real-world experience running Lambda in production and migrating from an existing monolithic architecture.

KCD Zurich 2023 — Bridge Dev & Ops with eBPF.pdf

Raphaël PINSON

Mojolicious

Marcus Ramberg

Feedback en continu grâce au TDD et au AsCode

Haja R

Yeoman Workflow

John-Philip Johansson

Deploying Symfony | symfony.cat

Pablo Godel

Optimizing Your CI Pipelines

Sebastian Witowski

Bootstrap training basics tutorial | Bootstrap Essentials

QA TrainingHub

Monitoring at Cloud Scale

Julien Pivotto

Serverless in production, an experience report (FullStack 2018)

Yan Cui

Using Angular-CLI to Deploy an Angular 2 App Using Firebase in 30 Minutes

Tracy Lee

Do you think it’s possible to live code an Angular 2 app, create a backend, and deploy it in one talk? With the convenience of Angular-CLI and a little help from Firebase and material design, see how easy it is to create apps with Angular 2 and why this new framework is the great for quickly prototyping ideas and is built to scale large applications across distributed teams. Example repo with completed branches - https://github.com/ladyleet/ngcruise-up Deployed App - https://ngpoland-d7d54.firebaseapp.com/

Container Power Hour with Jess, Clare, and Abby (CON362) - AWS re:Invent 2018

Amazon Web Services

Todo app Angular

Bruno Alencar

Grunt.js and Yeoman, Continous Integration

David Amend

Similar to [BreizhCamp, format 15min] Construire et automatiser l'ecosystème de son SaaS grâce à une spécification OpenAPI (20)

RPM experiments

Quest for the Perfect Workflow for McrFRED

フロントエンドエンジニア（仮）〜え、ちょっとフロントやること多すぎじゃない！？〜

Amped for AMP at Pubcon Las Vegas 2016

DevOpsDays Zurich 2023 — Bridging Dev and Ops with eBPF: Extending Observabil...

2015 - Basta! 2015, DE: JavaScript und build

Serverless in Production, an experience report (AWS UG South Wales)

KCD Zurich 2023 — Bridge Dev & Ops with eBPF.pdf

Mojolicious

Feedback en continu grâce au TDD et au AsCode

Yeoman Workflow

Deploying Symfony | symfony.cat

Optimizing Your CI Pipelines

Bootstrap training basics tutorial | Bootstrap Essentials

Monitoring at Cloud Scale

Serverless in production, an experience report (FullStack 2018)

Using Angular-CLI to Deploy an Angular 2 App Using Firebase in 30 Minutes

Container Power Hour with Jess, Clare, and Abby (CON362) - AWS re:Invent 2018

Todo app Angular

Grunt.js and Yeoman, Continous Integration

More from François-Guillaume Ribreau

REX LEAN- Créer un SaaS et être rentable après 6 mois

François-Guillaume Ribreau

La fameuse histoire du SaaS que l'on commence avec une unique page sans rien derrière ("fake it until you make it") mais avec la particularité ici d'employer le Lean Software Management et l'eXtreme Programming (XP). Un SaaS que l'on construit au fil des années et des échanges clients en suivant le Lean Software Management avec une (grosse) pincée d'XP. 😇Comment prenons nous en compte quotidiennement le chaos de la réalité et l'illusion du contrôle pour vivre sans planification et roadmap. 📞L'emploi du mob et du pair-programming dans une organisation en télétravail complet. 🎚Pricing d'un SaaS = Lean 🔁Garder une feedback loop inférieur à deux jours 🔫Vivre la culture "customer driven" plutôt que d'en parler 🥸Comment gérer les appels d'offre publique en lean 🥶Certifications (e.g. ISO27001) et lean? Un amour impossible? 💶 Comment supprimer le no-estimate / estimations / deadlines même quand nos prospects et clients sont des multi-nationales du NASDAQ et du CAC40. 🥲Quels ont été nos succès et nos échecs ?

Une plateforme moderne pour le groupe SIPA/Ouest-France 

François-Guillaume Ribreau

Comment imaginer et implémenter une plateforme (au sens Apple Store) from-scratch au sein d'un groupe média ? Quelle philosophie ? Quels principes ? Quelle architecture choisir ? Comment assurer la scalabilité des développements interne comme externe ? Nous aborderons aussi le tournant numérique du groupe par cette plateforme ouverte. Le développement d'un écosystème avec nos partenaires et filiales basé sur des contrats json-schema/open-api et les conséquences sur diverses dimensions.

RedisConf 2016 - Redis usage and ecosystem

François-Guillaume Ribreau

Implementing pattern-matching in JavaScript (full version)

François-Guillaume Ribreau

Implementing pattern-matching in JavaScript (short version)

François-Guillaume Ribreau

Automatic constraints as a team maturity accelerator for startups

François-Guillaume Ribreau

Development Principles & Philosophy

François-Guillaume Ribreau

Les enjeux de l'information et de l'algorithmique dans notre société

François-Guillaume Ribreau

How I monitor SaaS products

François-Guillaume Ribreau

Continous Integration of (JS) projects & check-build philosophy

François-Guillaume Ribreau

Introduction to Redis

François-Guillaume Ribreau

Approfondissement CSS3

François-Guillaume Ribreau

Découverte HTML5/CSS3

François-Guillaume Ribreau

More from François-Guillaume Ribreau (13)

REX LEAN- Créer un SaaS et être rentable après 6 mois

Une plateforme moderne pour le groupe SIPA/Ouest-France 

RedisConf 2016 - Redis usage and ecosystem

Implementing pattern-matching in JavaScript (full version)

Implementing pattern-matching in JavaScript (short version)

Automatic constraints as a team maturity accelerator for startups

Development Principles & Philosophy

Les enjeux de l'information et de l'algorithmique dans notre société

How I monitor SaaS products

Continous Integration of (JS) projects & check-build philosophy

Introduction to Redis

Approfondissement CSS3

Découverte HTML5/CSS3

Recently uploaded

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

DanBrown980551

Do you want to learn how to model and simulate an electrical network from scratch in under an hour? Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)! During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook. PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides: - A fully editable and extendable library for grid component modelling; - Visualization tools to display your network; - Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses; The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well. What you will learn during the webinar: - For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills; - For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.

Accelerate your Kubernetes clusters with Varnish Caching

Thijs Feryn

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

FIDO Alliance

Quantum Computing: Current Landscape and the Future Role of APIs

Vlad Stirbu

Climate Impact of Software Testing at Nordic Testing Days

Kari Kakkonen

My slides at Nordic Testing Days 6.6.2024 Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.

The Art of the Pitch: WordPress Relationships and Sales

Laura Byrne

Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes? All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Albert Hoitingh

Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...

SOFTTECHHUB

The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing. One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

James Anderson

Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management. The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM). Speakers: Bob Boule Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle. Gopinath Rebala Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.

Introduction to CHERI technology - Cybersecurity

mikeeftimakis1

State of ICS and IoT Cyber Threat Landscape Report 2024 preview

Prayukth K V

The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development. The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers: State of global ICS asset and network exposure Sectoral targets and attacks as well as the cost of ransom Global APT activity, AI usage, actor and tactic profiles, and implications Rise in volumes of AI-powered cyberattacks Major cyber events in 2024 Malware and malicious payload trends Cyberattack types and targets Vulnerability exploit attempts on CVEs Attacks on counties – USA Expansion of bot farms – how, where, and why In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East Why are attacks on smart factories rising? Cyber risk predictions Axis of attacks – Europe Systemic attacks in the Middle East Download the full report from here: https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/

PCI PIN Basics Webinar from the Controlcase Team

ControlCase

Elevating Tactical DDD Patterns Through Object Calisthenics

Dorra BARTAGUIZ

After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!

UiPath Community Day Dubai: AI at Work..

UiPathCommunity

Welcome to the first live UiPath Community Day Dubai! Join us for this unique occasion to meet our local and global UiPath Community and leaders. You will get a full view of the MEA region's automation landscape and the AI Powered automation technology capabilities of UiPath. Also, hosted by our local partners Marc Ellis, you will enjoy a half-day packed with industry insights and automation peers networking. 📕 Curious on our agenda? Wait no more! 10:00 Welcome note - UiPath Community in Dubai Lovely Sinha, UiPath Community Chapter Leader, UiPath MVPx3, Hyper-automation Consultant, First Abu Dhabi Bank 10:20 A UiPath cross-region MEA overview Ashraf El Zarka, VP and Managing Director MEA, UiPath 10:35: Customer Success Journey Deepthi Deepak, Head of Intelligent Automation CoE, First Abu Dhabi Bank 11:15 The UiPath approach to GenAI with our three principles: improve accuracy, supercharge productivity, and automate more Boris Krumrey, Global VP, Automation Innovation, UiPath 12:15 To discover how Marc Ellis leverages tech-driven solutions in recruitment and managed services. Brendan Lingam, Director of Sales and Business Development, Marc Ellis

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

UiPathCommunity

In questo evento online gratuito, organizzato dalla Community Italiana di UiPath, potrai esplorare le nuove funzionalità di Autopilot, il tool che integra l'Intelligenza Artificiale nei processi di sviluppo e utilizzo delle Automazioni. 📕 Vedremo insieme alcuni esempi dell'utilizzo di Autopilot in diversi tool della Suite UiPath: Autopilot per Studio Web Autopilot per Studio Autopilot per Apps Clipboard AI GenAI applicata alla Document Understanding 👨‍🏫👨‍💻 Speakers: Stefano Negro, UiPath MVPx3, RPA Tech Lead @ BSP Consultant Flavio Martinelli, UiPath MVP 2023, Technical Account Manager @UiPath Andrei Tasca, RPA Solutions Team Lead @NTT Data

Removing Uninteresting Bytes in Software Fuzzing

Aftab Hussain

Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process. In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds. - These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.

A tale of scale & speed: How the US Navy is enabling software delivery from l...

sonjaschweigert1

Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved: - Reduction in onboarding time from 5 weeks to 1 day - Improved developer experience and productivity through actionable findings and reduction of false positives - Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO) Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production. We will cover: - How to remove silos in DevSecOps - How to build efficient development pipeline roles and component templates - How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence) - How to streamline operations with automated policy checks on container images

Video Streaming: Then, Now, and in the Future

Alpen-Adria-Universität

In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.

Assure Contact Center Experiences for Your Customers With ThousandEyes

ThousandEyes

Recently uploaded (20)

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

Accelerate your Kubernetes clusters with Varnish Caching

FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf

Quantum Computing: Current Landscape and the Future Role of APIs

Climate Impact of Software Testing at Nordic Testing Days

The Art of the Pitch: WordPress Relationships and Sales

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

Introduction to CHERI technology - Cybersecurity

State of ICS and IoT Cyber Threat Landscape Report 2024 preview

PCI PIN Basics Webinar from the Controlcase Team

Elevating Tactical DDD Patterns Through Object Calisthenics

UiPath Community Day Dubai: AI at Work..

FIDO Alliance Osaka Seminar: Overview.pdf

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

Removing Uninteresting Bytes in Software Fuzzing

A tale of scale & speed: How the US Navy is enabling software delivery from l...

Video Streaming: Then, Now, and in the Future

Assure Contact Center Experiences for Your Customers With ThousandEyes

[BreizhCamp, format 15min] Construire et automatiser l'ecosystème de son SaaS grâce à une spécification OpenAPI

1. Construire et automatiser l’écosystème de son SaaS grâce à une spéciﬁcation OpenAPI (Swagger)

3. François-Guillaume Ribreau —

4. François-Guillaume Ribreau — Ex-Bringr cofounder & CTO

5. François-Guillaume Ribreau — Ex-Bringr cofounder & CTO Ex-Architect @iAdvize

6. François-Guillaume Ribreau — Ex-Bringr cofounder & CTO Ex-Architect @iAdvize Architect & Head of development @Ouest-France

7. François-Guillaume Ribreau — Ex-Bringr cofounder & CTO Ex-Architect @iAdvize Architect & Head of development @Ouest-France 🌟 Founded @imagecharts @Redsmin @mailpopin

8. François-Guillaume Ribreau — Ex-Bringr cofounder & CTO Ex-Architect @iAdvize Architect & Head of development @Ouest-France 🌟 Founded @imagecharts @Redsmin @mailpopin 🚀 Trainer @EPSI_Nantes @UnivNantes

9. François-Guillaume Ribreau — Ex-Bringr cofounder & CTO Ex-Architect @iAdvize Architect & Head of development @Ouest-France 🌟 Founded @imagecharts @Redsmin @mailpopin 🚀 Trainer @EPSI_Nantes @UnivNantes 📢 Twitter/Github: @FGRibreau

10. Context

11.

12. https://chart.googleapis.com/chart?cht=p3&chd=t: 60,40&chs=500x500&chl=Hello|World

13. https://chart.googleapis.com/chart?cht=p3&chd=t: 60,40&chs=500x500&chl=Hello|World

14. https://chart.googleapis.com/chart?cht=p3&chd=t: 60,40&chs=500x500&chl=Hello|World <img src=“https://chart.googleapis.com/chart?…” />

15.

16.

17.

18. One rule: Automate, automate, automate. ๏API Documentation ๏API GUI client (APIGee like) ๏API Input Validation •Plugins ecosystem •Client libraries Checkpoint

19. Solution

20.

21.

22.

23.

24. Single Source of Truth + Input Validation

25.

26. Documentation with Swagger-UI

27. Documentation with Swagger-UI

28. Release pipeline SCM

29. Release pipeline SCM CI CD image-charts.com enforce code-cov. >98% (nyc) update deps (updtr) + commit daily build

30. ✓API Documentation ✓API GUI client (APIGee like) ✓API Input Validation ?Plugins ecosystem ?Client libraries Checkpoint

31.

32.

33.

34. CI

35. npm run --silent download-swagger // curl -s https://image-charts.com/swagger.json > scripts/swagger.json CI

36. npm run --silent download-swagger // curl -s https://image-charts.com/swagger.json > scripts/swagger.json && npm run --silent generate // node scripts/generateREADME.js > README.md // && node scripts/generateComponent.js > src/index.js // && babel src/index.js > lib/index.js CI

37. npm run --silent download-swagger // curl -s https://image-charts.com/swagger.json > scripts/swagger.json && npm run --silent generate // node scripts/generateREADME.js > README.md // && node scripts/generateComponent.js > src/index.js // && babel src/index.js > lib/index.js && npm run --silent test CI

38. npm run --silent download-swagger // curl -s https://image-charts.com/swagger.json > scripts/swagger.json && npm run --silent generate // node scripts/generateREADME.js > README.md // && node scripts/generateComponent.js > src/index.js // && babel src/index.js > lib/index.js && npm run --silent test && npm run --silent test-coverage CI

39. npm run --silent download-swagger // curl -s https://image-charts.com/swagger.json > scripts/swagger.json && npm run --silent generate // node scripts/generateREADME.js > README.md // && node scripts/generateComponent.js > src/index.js // && babel src/index.js > lib/index.js && npm run --silent test && npm run --silent test-coverage && npm run --silent coverage-send CI

40. npm run --silent download-swagger // curl -s https://image-charts.com/swagger.json > scripts/swagger.json && npm run --silent generate // node scripts/generateREADME.js > README.md // && node scripts/generateComponent.js > src/index.js // && babel src/index.js > lib/index.js && npm run --silent test && npm run --silent test-coverage && npm run --silent coverage-send && npm run --silent updtr CI

41. npm run --silent download-swagger // curl -s https://image-charts.com/swagger.json > scripts/swagger.json && npm run --silent generate // node scripts/generateREADME.js > README.md // && node scripts/generateComponent.js > src/index.js // && babel src/index.js > lib/index.js && npm run --silent test && npm run --silent test-coverage && npm run --silent coverage-send && npm run --silent updtr && npm run --silent changelog && npm run --silent release // […] && npm-release $(jq.node 'get("info.version")' < ./scripts/swagger.json) &&[…] CI

42. scripts/model.js scripts/generateComponent.js

43. src/index.js

44. src/index.js

45. Release pipeline SCM CI CD image-charts.com ….

46. Release pipeline SCM CI CD CDCI mjml-chart image-charts.com Plugins ecosystem download swagger generate lib update deps run tests changelog release ….

47.

48.

49. ✓API Documentation ✓API GUI client (APIGee like) ✓API Input Validation ✓ Plugins ecosystem ? Client libraries Checkpoint

50.

51.

52.

53. docker 🐳 swaggerapi/swagger-generator :8080 curl localhost:8080/api/gen/clients | jq.node 'join("n")'

54. docker 🐳 swaggerapi/swagger-generator :8080 curl localhost:8080/api/gen/clients | jq.node 'join("n")'

55.

56.

57.

58.

59.

60.

61.

62.

63.

64. Release pipeline SCM CI CD CDCI mjml-chart image-charts.com Plugins ecosystem …

65. Release pipeline SCM CI CD CD github.com/image- charts/lib-...CI CI CD mjml-chart image-charts.com Client libraries Plugins ecosystem …

66. ✓API Documentation ✓API GUI client (APIGee like) ✓API Input Validation ✓ Plugins ecosystem ~ Client libraries Checkpoint #FAIL

67. Free plans for Redis administration & monitoring at redsmin.com Questions? @FGRibreau No more server-side rendering pain, 1 url = 1 chart image-charts.com

68. Free plans for Redis administration & monitoring at redsmin.com We are looking for Front-end Developers twitter.com/iadvizetech Questions? @FGRibreau No more server-side rendering pain, 1 url = 1 chart image-charts.com

[BreizhCamp, format 15min] Construire et automatiser l'ecosystème de son SaaS grâce à une spécification OpenAPI

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to [BreizhCamp, format 15min] Construire et automatiser l'ecosystème de son SaaS grâce à une spécification OpenAPI

Similar to [BreizhCamp, format 15min] Construire et automatiser l'ecosystème de son SaaS grâce à une spécification OpenAPI (20)

More from François-Guillaume Ribreau

More from François-Guillaume Ribreau (13)

Recently uploaded

Recently uploaded (20)

[BreizhCamp, format 15min] Construire et automatiser l'ecosystème de son SaaS grâce à une spécification OpenAPI