SlideShare a Scribd company logo
1 of 30
Download to read offline
Exploring REST Purity and
       Pragmatism

           Samisa Abeysinghe
        Vice President Engineering
REST
• General idea
  – It is simple
  – Widely used
  – “cool” & state of the art
  – And ideal for SOA & the enterprise


                     True?
Yes

Simple               Cool

          REST is…

Popular              Used
From Theory to Practice
• Can simplicity meet complexity?

• Can REST be used in enterprise?
REST for Enterprise

               Services &                                           Business
Standards                        Governance         Security
                  APIs                                              Models


HTTP & Media                       Lifecycle                         Billing &
                REST Service                       HTTP vs HTTPS
   types                          management                         metering



                                   Versioning &                       Tiers &
 Interfaces     RESTful APIs                       Authentication
                                  configurations                     Throttling



Programming    Simple, quick &    Committees &         Non-
                                                                    Pay for use
  languages     Web Oriented      Conformance       Repudiation
Services &                                           Business
Standards                        Governance         Security
                  APIs                                              Models


HTTP & Media                       Lifecycle                         Billing &
                REST Service                       HTTP vs HTTPS
   types                          management                         metering



                                   Versioning &                       Tiers &
 Interfaces     RESTful APIs                       Authentication
                                  configurations                     Throttling



Programming    Simple, quick &    Committees &         Non-
                                                                    Pay for use
  languages     Web Oriented      Conformance       Repudiation
REST Principles
                           Verbs


                       CRUD and more
                    (PUT, GET,POST,DELETE
     Names            … HEAD, OPTIONS)        Representations


    URI, XRI                                HTML, XML or Binary
(http://acme.com/                           (text/html, text/xml,
    customers)                                   image/png)




                      Resources
Services &                                           Business
Standards                        Governance         Security
                  APIs                                              Models


HTTP & Media                       Lifecycle                         Billing &
                REST Service                       HTTP vs HTTPS
   types                          management                         metering



                                   Versioning &                       Tiers &
 Interfaces     RESTful APIs                       Authentication
                                  configurations                     Throttling



Programming    Simple, quick &    Committees &         Non-
                                                                    Pay for use
  languages     Web Oriented      Conformance       Repudiation
Services vs APIs
• Services are what you develop
• APIs are what you expose
  – “The interface”
  – How can you consume the service?
RESTful APIs
• REST (REpresentational State Transfer)
  – An architectural style based on transferring
    representations of resources from a server to a
    client
• RESTful Web services
  – Web services built on the REST principles
  – Also called a RESTful Web API
  – http://en.wikipedia.org/wiki/Representational_sta
    te_transfer#RESTful_web_services
The Interface Matters
• It is not the implementation that matter
• But the interface
  – And got to be managed and maintained
    systematically
Services &                                           Business
Standards                        Governance         Security
                  APIs                                              Models


HTTP & Media                       Lifecycle                         Billing &
                REST Service                       HTTP vs HTTPS
   types                          management                         metering



                                   Versioning &                       Tiers &
 Interfaces     RESTful APIs                       Authentication
                                  configurations                     Throttling



Programming    Simple, quick &    Committees &         Non-
                                                                    Pay for use
  languages     Web Oriented      Conformance       Repudiation
Manage Life-Cycles




Service             API
Tools for Life-Cycle Management
Tools for Life-Cycle Management
Services &                                           Business
Standards                        Governance         Security
                  APIs                                              Models


HTTP & Media                       Lifecycle                         Billing &
                REST Service                       HTTP vs HTTPS
   types                          management                         metering



                                   Versioning &                       Tiers &
 Interfaces     RESTful APIs                       Authentication
                                  configurations                     Throttling



Programming    Simple, quick &    Committees &         Non-
                                                                    Pay for use
  languages     Web Oriented      Conformance       Repudiation
Securing RESTful Services

    Confidentiality                 Integrity
        HTTPS                        HTTPS


                      Security

    Authentication
                                 Non Repudiation
HTTP Basic/Digest Auth.,
                                 2-legged OAuth
 Mutual Auth., OAuth
Security Using OAuth




http://pathberiya.blogspot.com/2011/02/2-legged-oauth-to-secure-restful.html
Access Tokens



Application
                                 User Key
   Key        Used when                     Used when an
              applications are              end user is
              calling each                  using an
              other                         application
Application/User Key Generation Sequence
Services &                                           Business
Standards                        Governance         Security
                  APIs                                              Models


HTTP & Media                       Lifecycle                         Billing &
                REST Service                       HTTP vs HTTPS
   types                          management                         metering



                                   Versioning &                       Tiers &
 Interfaces     RESTful APIs                       Authentication
                                  configurations                     Throttling



Programming    Simple, quick &    Committees &         Non-
                                                                    Pay for use
  languages     Web Oriented      Conformance       Repudiation
Business Models
Business Requirements

Tiers       Metering     Throttling        Billing       Monitoring

               Usage       Tier limits
Platinum                                   Pay for use       Trends
              metering    enforcement


              Capacity    SLA & policy                      Continuous
  Gold                                       Budget
              metering    enforcement                      improvement


               Status                                       Capacity
 Silver                   Prioritization    Estimates
              tracking                                      planning
Monitoring Tools
Insights & Continuous Improvement
Services &                                           Business
Standards                        Governance         Security
                  APIs                                              Models


HTTP & Media                       Lifecycle                         Billing &
                REST Service                       HTTP vs HTTPS
   types                          management                         metering



                                   Versioning &                       Tiers &
 Interfaces     RESTful APIs                       Authentication
                                  configurations                     Throttling



Programming    Simple, quick &    Committees &         Non-
                                                                    Pay for use
  languages     Web Oriented      Conformance       Repudiation
Closing Remarks
• REST is simple, cool, popular and used
• Need to look beyond coolness to use REST for
  real
• Think of REST as a way to expose APIs
• Pay attention to good governance
• Make informed security architecture decisions
• Focus on monitoring, analysis and insights
  based continuous improvements
Resources
•   http://wso2.com/products/api-manager/
•   http://wso2.com/products/governance-registry/
•   http://wso2.com/products/business-activity-monitor/
•   http://sanjiva.weerawarana.org/2012/08/api-management-
    missing-link-for-soa.html
•   http://sumedha.blogspot.com/search/label/API
WSO2 Engagement Model
•   QuickStart
•   Development Support
•   Development Services
•   Production Support
•   http://wso2.com/support
Thank you!
bizdev@wso2.com

More Related Content

What's hot

SOA & ESB Presentation
SOA & ESB PresentationSOA & ESB Presentation
SOA & ESB Presentationerichleipold
 
Paying for PaaS
Paying for PaaSPaying for PaaS
Paying for PaaSWSO2
 
ESB and SOA
ESB and SOAESB and SOA
ESB and SOAWSO2
 
Using a private cloud to automate and govern enterprise development
Using a private cloud to automate and govern enterprise developmentUsing a private cloud to automate and govern enterprise development
Using a private cloud to automate and govern enterprise developmentWSO2
 
Implementing SOA with Portal, an IBM Impact 2010 Presentation
Implementing SOA with Portal, an IBM Impact 2010 PresentationImplementing SOA with Portal, an IBM Impact 2010 Presentation
Implementing SOA with Portal, an IBM Impact 2010 Presentationguestbc8b80
 
Enterprise Soa Concept
Enterprise Soa ConceptEnterprise Soa Concept
Enterprise Soa ConceptTerry Cho
 
Delivering the Promise of SOA - Enterprise Integration Made Easy
Delivering the Promise of SOA - Enterprise Integration Made EasyDelivering the Promise of SOA - Enterprise Integration Made Easy
Delivering the Promise of SOA - Enterprise Integration Made EasyWSO2
 
Growing Adoption of Open Source in Enterprises
Growing Adoption of Open Source in EnterprisesGrowing Adoption of Open Source in Enterprises
Growing Adoption of Open Source in EnterprisesWSO2
 
Soa Overview
Soa OverviewSoa Overview
Soa OverviewTerry Cho
 
How the WSO2 ESB outperforms other major open source esb vendors
How the WSO2 ESB outperforms other major open source esb vendorsHow the WSO2 ESB outperforms other major open source esb vendors
How the WSO2 ESB outperforms other major open source esb vendorsWSO2
 
Quarterly WSO2 Platform Update Webinar - Q1 2016
Quarterly WSO2 Platform Update Webinar - Q1 2016Quarterly WSO2 Platform Update Webinar - Q1 2016
Quarterly WSO2 Platform Update Webinar - Q1 2016WSO2
 
Introduction to Enterprise Service Bus
Introduction to Enterprise Service BusIntroduction to Enterprise Service Bus
Introduction to Enterprise Service BusMahmoud Ezzat
 
Keynote-Service Orientation – Why is it good for your business
Keynote-Service Orientation – Why is it good for your businessKeynote-Service Orientation – Why is it good for your business
Keynote-Service Orientation – Why is it good for your businessWSO2
 
Service Oriented Architecture
Service Oriented Architecture Service Oriented Architecture
Service Oriented Architecture Prabhat gangwar
 
Differentiating between web APIs, SOA, & integration …and why it matters
Differentiating between web APIs, SOA, & integration…and why it mattersDifferentiating between web APIs, SOA, & integration…and why it matters
Differentiating between web APIs, SOA, & integration …and why it mattersKim Clark
 

What's hot (18)

SOA & ESB Presentation
SOA & ESB PresentationSOA & ESB Presentation
SOA & ESB Presentation
 
Paying for PaaS
Paying for PaaSPaying for PaaS
Paying for PaaS
 
ESB and SOA
ESB and SOAESB and SOA
ESB and SOA
 
Using a private cloud to automate and govern enterprise development
Using a private cloud to automate and govern enterprise developmentUsing a private cloud to automate and govern enterprise development
Using a private cloud to automate and govern enterprise development
 
Implementing SOA with Portal, an IBM Impact 2010 Presentation
Implementing SOA with Portal, an IBM Impact 2010 PresentationImplementing SOA with Portal, an IBM Impact 2010 Presentation
Implementing SOA with Portal, an IBM Impact 2010 Presentation
 
Enterprise Soa Concept
Enterprise Soa ConceptEnterprise Soa Concept
Enterprise Soa Concept
 
Delivering the Promise of SOA - Enterprise Integration Made Easy
Delivering the Promise of SOA - Enterprise Integration Made EasyDelivering the Promise of SOA - Enterprise Integration Made Easy
Delivering the Promise of SOA - Enterprise Integration Made Easy
 
Growing Adoption of Open Source in Enterprises
Growing Adoption of Open Source in EnterprisesGrowing Adoption of Open Source in Enterprises
Growing Adoption of Open Source in Enterprises
 
Soa Overview
Soa OverviewSoa Overview
Soa Overview
 
How the WSO2 ESB outperforms other major open source esb vendors
How the WSO2 ESB outperforms other major open source esb vendorsHow the WSO2 ESB outperforms other major open source esb vendors
How the WSO2 ESB outperforms other major open source esb vendors
 
Quarterly WSO2 Platform Update Webinar - Q1 2016
Quarterly WSO2 Platform Update Webinar - Q1 2016Quarterly WSO2 Platform Update Webinar - Q1 2016
Quarterly WSO2 Platform Update Webinar - Q1 2016
 
Soa
SoaSoa
Soa
 
Introduction to Enterprise Service Bus
Introduction to Enterprise Service BusIntroduction to Enterprise Service Bus
Introduction to Enterprise Service Bus
 
Keynote-Service Orientation – Why is it good for your business
Keynote-Service Orientation – Why is it good for your businessKeynote-Service Orientation – Why is it good for your business
Keynote-Service Orientation – Why is it good for your business
 
ESB Overview
ESB OverviewESB Overview
ESB Overview
 
Service Oriented Architecture
Service Oriented Architecture Service Oriented Architecture
Service Oriented Architecture
 
Differentiating between web APIs, SOA, & integration …and why it matters
Differentiating between web APIs, SOA, & integration…and why it mattersDifferentiating between web APIs, SOA, & integration…and why it matters
Differentiating between web APIs, SOA, & integration …and why it matters
 
Concept of SOA
Concept of SOAConcept of SOA
Concept of SOA
 

Similar to Exploring REST Purity and Pragmatism - Tuesday, November 6, 2012

Melbourne API Management Seminar
Melbourne API Management SeminarMelbourne API Management Seminar
Melbourne API Management SeminarCA API Management
 
Enterprise Access Control Patterns for Rest and Web APIs
Enterprise Access Control Patterns for Rest and Web APIsEnterprise Access Control Patterns for Rest and Web APIs
Enterprise Access Control Patterns for Rest and Web APIsCA API Management
 
Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...
Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...
Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...CA API Management
 
More Coverage, Better Diagnostics
More Coverage, Better DiagnosticsMore Coverage, Better Diagnostics
More Coverage, Better DiagnosticsSmartBear
 
CIS14: Early Peek at PingFederate Administrative REST API
CIS14: Early Peek at PingFederate Administrative REST APICIS14: Early Peek at PingFederate Administrative REST API
CIS14: Early Peek at PingFederate Administrative REST APICloudIDSummit
 
Ss Wrap Up Session 13 Aug
Ss Wrap Up Session 13 AugSs Wrap Up Session 13 Aug
Ss Wrap Up Session 13 AugWSO2
 
SOA Summer School: Best of SOA Summer School – Encore Session
SOA Summer School: Best of SOA Summer School – Encore Session SOA Summer School: Best of SOA Summer School – Encore Session
SOA Summer School: Best of SOA Summer School – Encore Session WSO2
 
REST API Design & Development
REST API Design & DevelopmentREST API Design & Development
REST API Design & DevelopmentAshok Pundit
 
TechEd Preconference
TechEd PreconferenceTechEd Preconference
TechEd PreconferenceSimon Guest
 
Windows Azure架构探析
Windows Azure架构探析Windows Azure架构探析
Windows Azure架构探析George Ang
 
Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)
Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)
Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)Codit
 
Basic of API
Basic of APIBasic of API
Basic of APIRishanKP1
 
Soa role in telco industry
Soa   role in telco industrySoa   role in telco industry
Soa role in telco industryPavan K
 
Cloudforce Essentials 2012 - Understanding Force.com in 60 Minutes or Less
Cloudforce Essentials 2012 - Understanding Force.com  in 60 Minutes or LessCloudforce Essentials 2012 - Understanding Force.com  in 60 Minutes or Less
Cloudforce Essentials 2012 - Understanding Force.com in 60 Minutes or LessSalesforce_APAC
 
Azure IPaaS: #IntegrationEvolved (Glenn Colpaert @ Codit's BizTalk 2016 Launch)
Azure IPaaS: #IntegrationEvolved (Glenn Colpaert @ Codit's BizTalk 2016 Launch)Azure IPaaS: #IntegrationEvolved (Glenn Colpaert @ Codit's BizTalk 2016 Launch)
Azure IPaaS: #IntegrationEvolved (Glenn Colpaert @ Codit's BizTalk 2016 Launch)Codit
 
Sql Server 2012 Reporting-Services is Now a SharePoint Service Application
Sql Server 2012   Reporting-Services is Now a SharePoint Service ApplicationSql Server 2012   Reporting-Services is Now a SharePoint Service Application
Sql Server 2012 Reporting-Services is Now a SharePoint Service ApplicationInnoTech
 
Impact 2011 2667 - Developing effective services for use in critical business...
Impact 2011 2667 - Developing effective services for use in critical business...Impact 2011 2667 - Developing effective services for use in critical business...
Impact 2011 2667 - Developing effective services for use in critical business...Brian Petrini
 
Oracle SOA Suite Overview - Integration in a Service-Oriented World
Oracle SOA Suite Overview - Integration in a Service-Oriented WorldOracle SOA Suite Overview - Integration in a Service-Oriented World
Oracle SOA Suite Overview - Integration in a Service-Oriented WorldOracleContractors
 

Similar to Exploring REST Purity and Pragmatism - Tuesday, November 6, 2012 (20)

Melbourne API Management Seminar
Melbourne API Management SeminarMelbourne API Management Seminar
Melbourne API Management Seminar
 
Enterprise Access Control Patterns for Rest and Web APIs
Enterprise Access Control Patterns for Rest and Web APIsEnterprise Access Control Patterns for Rest and Web APIs
Enterprise Access Control Patterns for Rest and Web APIs
 
Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...
Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...
Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...
 
More Coverage, Better Diagnostics
More Coverage, Better DiagnosticsMore Coverage, Better Diagnostics
More Coverage, Better Diagnostics
 
CIS14: Early Peek at PingFederate Administrative REST API
CIS14: Early Peek at PingFederate Administrative REST APICIS14: Early Peek at PingFederate Administrative REST API
CIS14: Early Peek at PingFederate Administrative REST API
 
Ss Wrap Up Session 13 Aug
Ss Wrap Up Session 13 AugSs Wrap Up Session 13 Aug
Ss Wrap Up Session 13 Aug
 
SOA Summer School: Best of SOA Summer School – Encore Session
SOA Summer School: Best of SOA Summer School – Encore Session SOA Summer School: Best of SOA Summer School – Encore Session
SOA Summer School: Best of SOA Summer School – Encore Session
 
REST API Design & Development
REST API Design & DevelopmentREST API Design & Development
REST API Design & Development
 
TechEd Preconference
TechEd PreconferenceTechEd Preconference
TechEd Preconference
 
Api design part 1
Api design part 1Api design part 1
Api design part 1
 
Windows Azure架构探析
Windows Azure架构探析Windows Azure架构探析
Windows Azure架构探析
 
apiGrove
apiGroveapiGrove
apiGrove
 
Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)
Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)
Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)
 
Basic of API
Basic of APIBasic of API
Basic of API
 
Soa role in telco industry
Soa   role in telco industrySoa   role in telco industry
Soa role in telco industry
 
Cloudforce Essentials 2012 - Understanding Force.com in 60 Minutes or Less
Cloudforce Essentials 2012 - Understanding Force.com  in 60 Minutes or LessCloudforce Essentials 2012 - Understanding Force.com  in 60 Minutes or Less
Cloudforce Essentials 2012 - Understanding Force.com in 60 Minutes or Less
 
Azure IPaaS: #IntegrationEvolved (Glenn Colpaert @ Codit's BizTalk 2016 Launch)
Azure IPaaS: #IntegrationEvolved (Glenn Colpaert @ Codit's BizTalk 2016 Launch)Azure IPaaS: #IntegrationEvolved (Glenn Colpaert @ Codit's BizTalk 2016 Launch)
Azure IPaaS: #IntegrationEvolved (Glenn Colpaert @ Codit's BizTalk 2016 Launch)
 
Sql Server 2012 Reporting-Services is Now a SharePoint Service Application
Sql Server 2012   Reporting-Services is Now a SharePoint Service ApplicationSql Server 2012   Reporting-Services is Now a SharePoint Service Application
Sql Server 2012 Reporting-Services is Now a SharePoint Service Application
 
Impact 2011 2667 - Developing effective services for use in critical business...
Impact 2011 2667 - Developing effective services for use in critical business...Impact 2011 2667 - Developing effective services for use in critical business...
Impact 2011 2667 - Developing effective services for use in critical business...
 
Oracle SOA Suite Overview - Integration in a Service-Oriented World
Oracle SOA Suite Overview - Integration in a Service-Oriented WorldOracle SOA Suite Overview - Integration in a Service-Oriented World
Oracle SOA Suite Overview - Integration in a Service-Oriented World
 

More from WSO2

Accelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessAccelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessWSO2
 
How to Create a Service in Choreo
How to Create a Service in ChoreoHow to Create a Service in Choreo
How to Create a Service in ChoreoWSO2
 
Ballerina Tech Talk - May 2023
Ballerina Tech Talk - May 2023Ballerina Tech Talk - May 2023
Ballerina Tech Talk - May 2023WSO2
 
Platform Strategy to Deliver Digital Experiences on Azure
Platform Strategy to Deliver Digital Experiences on AzurePlatform Strategy to Deliver Digital Experiences on Azure
Platform Strategy to Deliver Digital Experiences on AzureWSO2
 
GartnerITSymSessionSlides.pdf
GartnerITSymSessionSlides.pdfGartnerITSymSessionSlides.pdf
GartnerITSymSessionSlides.pdfWSO2
 
[Webinar] How to Create an API in Minutes
[Webinar] How to Create an API in Minutes[Webinar] How to Create an API in Minutes
[Webinar] How to Create an API in MinutesWSO2
 
Modernizing the Student Journey with Ethos Identity
Modernizing the Student Journey with Ethos IdentityModernizing the Student Journey with Ethos Identity
Modernizing the Student Journey with Ethos IdentityWSO2
 
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...WSO2
 
CIO Summit Berlin 2022.pptx.pdf
CIO Summit Berlin 2022.pptx.pdfCIO Summit Berlin 2022.pptx.pdf
CIO Summit Berlin 2022.pptx.pdfWSO2
 
Delivering New Digital Experiences Fast - Introducing Choreo
Delivering New Digital Experiences Fast - Introducing ChoreoDelivering New Digital Experiences Fast - Introducing Choreo
Delivering New Digital Experiences Fast - Introducing ChoreoWSO2
 
Fueling the Digital Experience Economy with Connected Products
Fueling the Digital Experience Economy with Connected ProductsFueling the Digital Experience Economy with Connected Products
Fueling the Digital Experience Economy with Connected ProductsWSO2
 
A Reference Methodology for Agile Digital Businesses
 A Reference Methodology for Agile Digital Businesses A Reference Methodology for Agile Digital Businesses
A Reference Methodology for Agile Digital BusinessesWSO2
 
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)WSO2
 
Lessons from the pandemic - From a single use case to true transformation
 Lessons from the pandemic - From a single use case to true transformation Lessons from the pandemic - From a single use case to true transformation
Lessons from the pandemic - From a single use case to true transformationWSO2
 
Adding Liveliness to Banking Experiences
Adding Liveliness to Banking ExperiencesAdding Liveliness to Banking Experiences
Adding Liveliness to Banking ExperiencesWSO2
 
Building a Future-ready Bank
Building a Future-ready BankBuilding a Future-ready Bank
Building a Future-ready BankWSO2
 
WSO2 API Manager Community Call - November 2021
WSO2 API Manager Community Call - November 2021WSO2 API Manager Community Call - November 2021
WSO2 API Manager Community Call - November 2021WSO2
 
[API World ] - Managing Asynchronous APIs
[API World ] - Managing Asynchronous APIs[API World ] - Managing Asynchronous APIs
[API World ] - Managing Asynchronous APIsWSO2
 
[API World 2021 ] - Understanding Cloud Native Deployment
[API World 2021 ] - Understanding Cloud Native Deployment[API World 2021 ] - Understanding Cloud Native Deployment
[API World 2021 ] - Understanding Cloud Native DeploymentWSO2
 
[API Word 2021] - Quantum Duality of “API as a Business and a Technology”
[API Word 2021] - Quantum Duality of “API as a Business and a Technology”[API Word 2021] - Quantum Duality of “API as a Business and a Technology”
[API Word 2021] - Quantum Duality of “API as a Business and a Technology”WSO2
 

More from WSO2 (20)

Accelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessAccelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with Platformless
 
How to Create a Service in Choreo
How to Create a Service in ChoreoHow to Create a Service in Choreo
How to Create a Service in Choreo
 
Ballerina Tech Talk - May 2023
Ballerina Tech Talk - May 2023Ballerina Tech Talk - May 2023
Ballerina Tech Talk - May 2023
 
Platform Strategy to Deliver Digital Experiences on Azure
Platform Strategy to Deliver Digital Experiences on AzurePlatform Strategy to Deliver Digital Experiences on Azure
Platform Strategy to Deliver Digital Experiences on Azure
 
GartnerITSymSessionSlides.pdf
GartnerITSymSessionSlides.pdfGartnerITSymSessionSlides.pdf
GartnerITSymSessionSlides.pdf
 
[Webinar] How to Create an API in Minutes
[Webinar] How to Create an API in Minutes[Webinar] How to Create an API in Minutes
[Webinar] How to Create an API in Minutes
 
Modernizing the Student Journey with Ethos Identity
Modernizing the Student Journey with Ethos IdentityModernizing the Student Journey with Ethos Identity
Modernizing the Student Journey with Ethos Identity
 
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...
Choreo - Build unique digital experiences on WSO2's platform, secured by Etho...
 
CIO Summit Berlin 2022.pptx.pdf
CIO Summit Berlin 2022.pptx.pdfCIO Summit Berlin 2022.pptx.pdf
CIO Summit Berlin 2022.pptx.pdf
 
Delivering New Digital Experiences Fast - Introducing Choreo
Delivering New Digital Experiences Fast - Introducing ChoreoDelivering New Digital Experiences Fast - Introducing Choreo
Delivering New Digital Experiences Fast - Introducing Choreo
 
Fueling the Digital Experience Economy with Connected Products
Fueling the Digital Experience Economy with Connected ProductsFueling the Digital Experience Economy with Connected Products
Fueling the Digital Experience Economy with Connected Products
 
A Reference Methodology for Agile Digital Businesses
 A Reference Methodology for Agile Digital Businesses A Reference Methodology for Agile Digital Businesses
A Reference Methodology for Agile Digital Businesses
 
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)
Workflows in WSO2 API Manager - WSO2 API Manager Community Call (12/15/2021)
 
Lessons from the pandemic - From a single use case to true transformation
 Lessons from the pandemic - From a single use case to true transformation Lessons from the pandemic - From a single use case to true transformation
Lessons from the pandemic - From a single use case to true transformation
 
Adding Liveliness to Banking Experiences
Adding Liveliness to Banking ExperiencesAdding Liveliness to Banking Experiences
Adding Liveliness to Banking Experiences
 
Building a Future-ready Bank
Building a Future-ready BankBuilding a Future-ready Bank
Building a Future-ready Bank
 
WSO2 API Manager Community Call - November 2021
WSO2 API Manager Community Call - November 2021WSO2 API Manager Community Call - November 2021
WSO2 API Manager Community Call - November 2021
 
[API World ] - Managing Asynchronous APIs
[API World ] - Managing Asynchronous APIs[API World ] - Managing Asynchronous APIs
[API World ] - Managing Asynchronous APIs
 
[API World 2021 ] - Understanding Cloud Native Deployment
[API World 2021 ] - Understanding Cloud Native Deployment[API World 2021 ] - Understanding Cloud Native Deployment
[API World 2021 ] - Understanding Cloud Native Deployment
 
[API Word 2021] - Quantum Duality of “API as a Business and a Technology”
[API Word 2021] - Quantum Duality of “API as a Business and a Technology”[API Word 2021] - Quantum Duality of “API as a Business and a Technology”
[API Word 2021] - Quantum Duality of “API as a Business and a Technology”
 

Exploring REST Purity and Pragmatism - Tuesday, November 6, 2012

  • 1. Exploring REST Purity and Pragmatism Samisa Abeysinghe Vice President Engineering
  • 2. REST • General idea – It is simple – Widely used – “cool” & state of the art – And ideal for SOA & the enterprise True?
  • 3. Yes Simple Cool REST is… Popular Used
  • 4. From Theory to Practice • Can simplicity meet complexity? • Can REST be used in enterprise?
  • 5. REST for Enterprise Services & Business Standards Governance Security APIs Models HTTP & Media Lifecycle Billing & REST Service HTTP vs HTTPS types management metering Versioning & Tiers & Interfaces RESTful APIs Authentication configurations Throttling Programming Simple, quick & Committees & Non- Pay for use languages Web Oriented Conformance Repudiation
  • 6. Services & Business Standards Governance Security APIs Models HTTP & Media Lifecycle Billing & REST Service HTTP vs HTTPS types management metering Versioning & Tiers & Interfaces RESTful APIs Authentication configurations Throttling Programming Simple, quick & Committees & Non- Pay for use languages Web Oriented Conformance Repudiation
  • 7. REST Principles Verbs CRUD and more (PUT, GET,POST,DELETE Names … HEAD, OPTIONS) Representations URI, XRI HTML, XML or Binary (http://acme.com/ (text/html, text/xml, customers) image/png) Resources
  • 8. Services & Business Standards Governance Security APIs Models HTTP & Media Lifecycle Billing & REST Service HTTP vs HTTPS types management metering Versioning & Tiers & Interfaces RESTful APIs Authentication configurations Throttling Programming Simple, quick & Committees & Non- Pay for use languages Web Oriented Conformance Repudiation
  • 9. Services vs APIs • Services are what you develop • APIs are what you expose – “The interface” – How can you consume the service?
  • 10. RESTful APIs • REST (REpresentational State Transfer) – An architectural style based on transferring representations of resources from a server to a client • RESTful Web services – Web services built on the REST principles – Also called a RESTful Web API – http://en.wikipedia.org/wiki/Representational_sta te_transfer#RESTful_web_services
  • 11. The Interface Matters • It is not the implementation that matter • But the interface – And got to be managed and maintained systematically
  • 12. Services & Business Standards Governance Security APIs Models HTTP & Media Lifecycle Billing & REST Service HTTP vs HTTPS types management metering Versioning & Tiers & Interfaces RESTful APIs Authentication configurations Throttling Programming Simple, quick & Committees & Non- Pay for use languages Web Oriented Conformance Repudiation
  • 14. Tools for Life-Cycle Management
  • 15. Tools for Life-Cycle Management
  • 16. Services & Business Standards Governance Security APIs Models HTTP & Media Lifecycle Billing & REST Service HTTP vs HTTPS types management metering Versioning & Tiers & Interfaces RESTful APIs Authentication configurations Throttling Programming Simple, quick & Committees & Non- Pay for use languages Web Oriented Conformance Repudiation
  • 17. Securing RESTful Services Confidentiality Integrity HTTPS HTTPS Security Authentication Non Repudiation HTTP Basic/Digest Auth., 2-legged OAuth Mutual Auth., OAuth
  • 19. Access Tokens Application User Key Key Used when Used when an applications are end user is calling each using an other application
  • 21. Services & Business Standards Governance Security APIs Models HTTP & Media Lifecycle Billing & REST Service HTTP vs HTTPS types management metering Versioning & Tiers & Interfaces RESTful APIs Authentication configurations Throttling Programming Simple, quick & Committees & Non- Pay for use languages Web Oriented Conformance Repudiation
  • 23. Business Requirements Tiers Metering Throttling Billing Monitoring Usage Tier limits Platinum Pay for use Trends metering enforcement Capacity SLA & policy Continuous Gold Budget metering enforcement improvement Status Capacity Silver Prioritization Estimates tracking planning
  • 25. Insights & Continuous Improvement
  • 26. Services & Business Standards Governance Security APIs Models HTTP & Media Lifecycle Billing & REST Service HTTP vs HTTPS types management metering Versioning & Tiers & Interfaces RESTful APIs Authentication configurations Throttling Programming Simple, quick & Committees & Non- Pay for use languages Web Oriented Conformance Repudiation
  • 27. Closing Remarks • REST is simple, cool, popular and used • Need to look beyond coolness to use REST for real • Think of REST as a way to expose APIs • Pay attention to good governance • Make informed security architecture decisions • Focus on monitoring, analysis and insights based continuous improvements
  • 28. Resources • http://wso2.com/products/api-manager/ • http://wso2.com/products/governance-registry/ • http://wso2.com/products/business-activity-monitor/ • http://sanjiva.weerawarana.org/2012/08/api-management- missing-link-for-soa.html • http://sumedha.blogspot.com/search/label/API
  • 29. WSO2 Engagement Model • QuickStart • Development Support • Development Services • Production Support • http://wso2.com/support