Wrapping and securing REST APIs with GraphQL

•

0 likes•25 views

This document discusses using GraphQL to wrap and secure REST APIs. It describes problems with REST APIs like multiple endpoints, over-fetching and under-fetching data, and versioning issues. GraphQL solves these problems with a single endpoint that returns flexible data structures. The document then provides steps to implement GraphQL, including using schemas to define queries and mutations, retrieving data from existing services and APIs, adding authentication middleware, and building a GraphQL server with Node.js and Apollo.

Technology

Wrapping and Securing
REST APIs with GraphQL
Nodejs Edinburgh Meetup
05/02/2019

@gethackteam
Roy Derks
@gethackteam
Auth0 Ambassador
#reactjs #ReactNative
#GraphQL

REST has multiple
endpoints that return ﬁxed
data structures
@gethackteam

Let’s look at an example
REST API
@gethackteam

What is wrong with REST?
Multiple Endpoints
@gethackteam

What is wrong with REST?
Multiple Endpoints
1
@gethackteam

What is wrong with REST?
Multiple Endpoints
1
2
@gethackteam

What is wrong with REST?
Multiple Endpoints
1
2
3
@gethackteam

Why not create one endpoint
with all information?
@gethackteam

Why not specify parameters
you want to receive?
@gethackteam

What is wrong with REST?
Under/Over-fetching
@gethackteam

SHOW
What is wrong with REST?
Under/Over-fetching
@gethackteam

SHOW
What is wrong with REST?
Under/Over-fetching
2
1
@gethackteam

But how does this affect the ﬁrst
version of the application?
@gethackteam

SHOW MORE
What is wrong with REST?
Versioning
V1 V2 @gethackteam

SHOW MORE
What is wrong with REST?
Versioning
V1 V2
Diﬀerent endpoints
@gethackteam

SHOW MORE
What is wrong with REST?
Versioning
V1 V2
Diﬀerent endpoints
@gethackteam
Diﬀerent parameters

SHOW MORE
What is wrong with REST?
Versioning
V1 V2
Diﬀerent endpoints
@gethackteam
Diﬀerent parameters
Diﬀerent datastructures

How does GraphQL
solve these problems?
@gethackteam

How does GraphQL
solve these problems?
Multiple Endpoints
@gethackteam

How does GraphQL
solve these problems?
Multiple Endpoints
Over-fetching
@gethackteam

How does GraphQL
solve these problems?
Multiple Endpoints
Under-fetching (N+1)
Over-fetching
@gethackteam

How does GraphQL
solve these problems?
Multiple Endpoints
Under-fetching (N+1)
Over-fetching Versioning /
Documentation@gethackteam

GraphQL has a single
endpoint that returns ﬂexible
data structures
@gethackteam

How does GraphQL Solve This
Multiple Endpoints
@gethackteam

How does GraphQL Solve This
Multiple Endpoints
GET
Query
@gethackteam

How does GraphQL Solve This
Multiple Endpoints
Mutation
POST PUT
PATCH DELETE
GET
Query
@gethackteam

How does GraphQL Solve This
Single endpoint

How does GraphQL Solve This
Single endpoint
Describe the data structure

How does GraphQL Solve This
Single endpoint
Describe the data structure
Set the possible queries

How does GraphQL Solve This
Single endpoint
Set dynamic parameters

Specify which data
to return
How does GraphQL Solve This
Single endpoint
Set dynamic parameters

How does GraphQL Solve This
Single endpoint
Predictable return result

Sounds great! How can I
implement this?
@gethackteam

Implementation
Existing services
Database(s)
Third-party API
@gethackteam

Implementation
@gethackteam
Node.js API Server

Implementation
@gethackteam
Node.js API Server
Apollo Express GraphQL Server

Implementation
Schemas
@gethackteam
Match data

to schema

Implementation
Retrieve data

from source
@gethackteam

Implementation
Retrieve data

from source
Get information

from headers
@gethackteam

Implementation
Initialise the

Node.js / GraphQL

server
@gethackteam

Data Sources
@gethackteam
Fetch REST endpoint

https://github.com/royderks/
auth0-graphql-rest/tree/
datasources
@gethackteam

Cool, let’s add Authentication
@gethackteam

Add Authentication
Middleware to validate JWT
@gethackteam

Add Authentication
Middleware to validate JWT
Retrieve key from JWT
@gethackteam

Add Authentication
Middleware to validate JWT
Retrieve key from JWT
Validate JWT scopes
@gethackteam

Add Authentication
Don’t break when token is

incorrect or missing @gethackteam

Add Authentication
Don’t break when token is

incorrect or missing
Add middleware to endpoint
@gethackteam

Add Authentication
Get information

from headers @gethackteam

Add Authentication
Get information

from headers Pass to REST endpoint @gethackteam

https://github.com/royderks/
auth0-graphql-rest
@gethackteam

GraphQL can be built on top of
your existing data and code
@gethackteam

Want to learn more?
@gethackteam #javascriptEverywhere
https://auth0.com/
https://howtographql.com

GraphQL provides a single endpoint that returns flexible data structures, solving issues with REST such as multiple endpoints, over-fetching and under-fetching of data, and versioning. It allows clients to specify exactly which data they need from the server in a query. GraphQL has gained popularity due to its modern tooling, large developer community, and adoption by many large companies. While REST has multiple endpoints that return fixed data structures, GraphQL is positioned to improve on this by offering more control and flexibility to clients.

Kafka and GraphQL: Misconceptions and Connections | Gerard Klijs, Open Web

HostedbyConfluent

GraphQL is a powerful way to bridge the gap between frontend and backend. Providing a typed API with introspection. This can be used for code generation or code completion. Because of some misconceptions it can be hard to combine GraphQL with Kafka, but it doesn’t need to be hard. After handling misconceptions like 'Kafka is just a message bus' and 'GraphQL is only for Graph databases' I will have a few demo's how both can be combined. It can be a clear way to make your event sourcing backend available to the frontend. GraphQL can be used to quickly setup a typed API, if you already use ksqlDB.

JNation: REST APIs to GraphQL with Express and Apollo

Roy Derks

Your frontend developers are pushing to get started with GraphQL, but you don’t have the backend capacity to migrate your existing REST APIs to GraphQL? Or you want to have a GraphQL API next to your existing endpoints that are based on REST? In this talk I’ll show how to create a Node.js/Express server that wraps existing REST APIs into one single GraphQL endpoint. Code examples: - https://codesandbox.io/s/mfu9e - https://codesandbox.io/s/graphqlrestexpressapolloserver-uydq6

GraphQL + relay

Cédric GILLET

Machine Learning and Python For Marketing Automation | MKGO October 2019 | Ru...

Ruth Everett

RxJS - The Basics & The Future

Tracy Lee

Graphql

Niv Ben David

This document provides an introduction and overview of GraphQL, including: - A brief history of GraphQL and how it was created by Facebook and adopted by other companies. - How GraphQL provides a more efficient alternative to REST APIs by allowing clients to specify exactly the data they need in a request. - Some key benefits of GraphQL like its type system, declarative data fetching, schema stitching, introspection, and versioning capabilities. - Some disadvantages like potential complexity in queries and challenges with rate limiting.

GraphQL over REST at Reactathon 2018

Sashko Stubailo

GraphQL is quickly becoming mainstream as one of the best ways to get data into your React application. When we see people modernize their app architecture and move to React, they often want to migrate their API to GraphQL as part of the same effort. But while React is super easy to adopt in a small part of your app at a time, GraphQL can seem like a much larger investment. In this talk, we’ll go over the fastest and most effective ways for React developers to incrementally migrate their existing APIs and backends to GraphQL, then talk about opportunities for improvement in the space. If you’re using React and are interested in GraphQL, but are looking for an extra push to get it up and running at your company, this is the talk for you!

The document discusses RxJS, a library for reactive programming using observables. It begins with an introduction from a beginner and expert perspective on RxJS. It then covers topics like creating observables, best practices for importing RxJS, choosing operators, avoiding subscriptions, wrapping APIs, and the benefits of "same-shapedness". Code examples are provided for creating observables, getting input changes as an observable, using operators like switchMap, and merging multiple observable data sources.

Real-time GraphQL in Angular app

Mikhail Asavkin

GraphQL & Relay

Viacheslav Slinko

The document discusses GraphQL, Relay, and some of their benefits and challenges. Some key points covered include: - GraphQL allows for declarative and UI-driven data fetching which can optimize network requests. - Relay uses GraphQL and allows defining data requirements and composing queries to fetch nested data in one roundtrip. - Benefits include simpler API versioning since fields can be changed without breaking clients. - Challenges include verbose code, lack of documentation, and not supporting subscriptions or local state management out of the box. - Overall GraphQL aims to solve many data fetching problems but has a complex setup process and learning curve.

GraphQL With Relay Part Deux

Brad Pillow

GraphQL Without a Database | Frontend Developer Love

Roy Derks

Your frontend developers are pushing to get started with GraphQL, but you don’t have the backend capacity to migrate your existing REST APIs to GraphQL? Or you want to have a GraphQL API next to your existing endpoints that are based on REST, without having to rewrite all your controllers? In this talk I’ll show how to wrap existing REST APIs into one single GraphQL endpoint on both the client and server side. This allows you to access the power of GraphQL without having to change any of your existing code or connect to a database.

GraphQL across the stack: How everything fits together

Sashko Stubailo

GraphQL Introduction

bobo52310

GraphQL is a query language for APIs that allows flexible querying of data from a server. It was originally created by Facebook in 2012 and open sourced in 2015. Some key benefits of GraphQL include allowing apps to control the specific data received from servers instead of receiving all possible data like with REST APIs, and GraphQL queries mirroring the response structure. GraphQL schemas define query and mutation parameters as well as return data types.

GraphQL Introduction

Serge Huber

This document introduces GraphQL, describing what it is and isn't. It explains that GraphQL is not a query language like SQL, but rather specifies fields that can be resolved through code. The document provides examples of GraphQL schemas, queries, and mutations. It also discusses GraphQL integration with various technologies like Relay and Java libraries. Finally, it demonstrates GraphQL tooling like GraphiQL and an example DX integration.

Scaling your GraphQL applications with Dgraph

Karthic Rao

GraphQL Munich Meetup #1 - How We Use GraphQL At Commercetools

Nicola Molinari

The document describes commercetools' experience with adopting GraphQL for their merchant center application. They were initially fetching category data with multiple REST requests, but were able to fetch it in one GraphQL query along with additional fields like number of subcategories and products. This solved a performance issue and allowed them to easily extend their API. They also migrated other parts of their client to use GraphQL, reducing network requests and complexity. Overall, GraphQL allowed them to optimize queries and extend their API with minimal effort.

Graphql Intro (Tutorial and Example)

Rafael Wilber Kerr

GraphQL Europe Recap

Philipp Sporrer

Introduction to GraphQL

Brainhub

React and GraphQL at Stripe

Sashko Stubailo

Adding GraphQL to your existing architecture

Sashko Stubailo

GraphQL

Joel Corrêa

React Flux to GraphQL

Turadg Aleahmad

This document discusses transitioning a web application from a REST API to a GraphQL API. It covers why the company adopted GraphQL to address over-fetching and under-fetching issues, choosing the Apollo GraphQL client library, and a staged approach to transitioning including creating a GraphQL server, isolated GraphQL components, and updating legacy stores with component queries. It also provides tips on handling caching keys, response headers, mobile REST clients, server rendering, and taking a staged approach to the transition.

Web Applications of the Future with TypeScript and GraphQL

Roy Derks

GraphQL: The Missing Link Between Frontend and Backend Devs

Sashko Stubailo

Engineers working on backend data services are often focused on operational concerns like data consistency, reliability, uptime, and storage efficiency. Because each situation calls for a specific set of tradeoffs, one organization can end up with a diverse set of backend databases and services. For the people building the UI and frontend API layers, this diversity can quickly become an issue, especially if the same client needs to call into multiple backends or fetch related objects across different data sources. GraphQL is a language-agnostic API gateway technology designed precisely to solve this mismatch between backend and frontend requirements. It provides a highly structured, yet flexible API layer that lets the client specify all of its data requirements in one GraphQL query, without needing to know about the backend services being accessed. Better yet, because of the structured, strongly typed nature of both GraphQL queries and APIs, it's possible to quickly get critical information, such as which objects and fields are accessed by which frontends, which clients will be affected by specific changes to the backend, and more. In this talk, I'll explain what GraphQL is, what data management problems it can solve in an organization, and how you can try it today.

Michelle Garrett - Build the API you want to see in the world (with GraphQL) ...

Codemotion

Have you ever used a third party API, and it didn't work the way you wanted? You don't have to live with it! I'll be sharing my experience transforming unruly JSON into the GraphQL API of my dreams. I'll speak about how GraphQL helped me get the data I wanted, and share some strategies for designing schema you'll love. By the end of this talk, you'll understand how GraphQL can improve the quality of your data, and your life.

Michelle Garrett - Build the API you want to see in the world (with GraphQL) ...

Codemotion

What's hot

Serverless GraphQL for Product Developers

Sashko Stubailo

RxJS: A Beginner & Expert's Perspective - ng-conf 2017

Tracy Lee

Real-time GraphQL in Angular app

Mikhail Asavkin

GraphQL & Relay

Viacheslav Slinko

GraphQL With Relay Part Deux

Brad Pillow

GraphQL Without a Database | Frontend Developer Love

Roy Derks

Your frontend developers are pushing to get started with GraphQL, but you don’t have the backend capacity to migrate your existing REST APIs to GraphQL? Or you want to have a GraphQL API next to your existing endpoints that are based on REST, without having to rewrite all your controllers? In this talk I’ll show how to wrap existing REST APIs into one single GraphQL endpoint on both the client and server side. This allows you to access the power of GraphQL without having to change any of your existing code or connect to a database.

GraphQL across the stack: How everything fits together

Sashko Stubailo

GraphQL Introduction

bobo52310

GraphQL Introduction

Serge Huber

Scaling your GraphQL applications with Dgraph

Karthic Rao

GraphQL Munich Meetup #1 - How We Use GraphQL At Commercetools

Nicola Molinari

Graphql Intro (Tutorial and Example)

Rafael Wilber Kerr

GraphQL Europe Recap

Philipp Sporrer

Introduction to GraphQL

Brainhub

React and GraphQL at Stripe

Sashko Stubailo

Adding GraphQL to your existing architecture

Sashko Stubailo

GraphQL

Joel Corrêa

React Flux to GraphQL

Turadg Aleahmad

Web Applications of the Future with TypeScript and GraphQL

Roy Derks

GraphQL: The Missing Link Between Frontend and Backend Devs

Sashko Stubailo

What's hot (20)

Serverless GraphQL for Product Developers

RxJS: A Beginner & Expert's Perspective - ng-conf 2017

Real-time GraphQL in Angular app

GraphQL & Relay

GraphQL With Relay Part Deux

GraphQL Without a Database | Frontend Developer Love

GraphQL across the stack: How everything fits together

GraphQL Introduction

Scaling your GraphQL applications with Dgraph

GraphQL Munich Meetup #1 - How We Use GraphQL At Commercetools

Graphql Intro (Tutorial and Example)

GraphQL Europe Recap

Introduction to GraphQL

React and GraphQL at Stripe

Adding GraphQL to your existing architecture

GraphQL

React Flux to GraphQL

Web Applications of the Future with TypeScript and GraphQL

GraphQL: The Missing Link Between Frontend and Backend Devs

Similar to Wrapping and securing REST APIs with GraphQL

Michelle Garrett - Build the API you want to see in the world (with GraphQL) ...

Codemotion

Michelle Garrett - Build the API you want to see in the world (with GraphQL) ...

Codemotion

Wrapping and Securing REST APIs with GraphQL

Roy Derks

The document discusses building a GraphQL API that fetches data from REST endpoints. It describes using JSON web tokens (JWT) for authentication by passing them in request headers to the REST API. It also discusses using Apollo data sources, which help with caching requests and fetching authentication data from request headers to pass to REST APIs. The document provides examples of building a GraphQL server with Express and Apollo that implements these techniques.

GraphQL-ify your APIs - Devoxx UK 2021

Soham Dasgupta

This document summarizes and compares several GraphQL libraries for Java: graphql-java, graphql-java-kickstart, and dgs-framework. It discusses their features for defining schemas and types, handling data fetching and caching, performing mutations, handling errors, testing functionality, and code generation capabilities. Overall, dgs-framework requires the least amount of boilerplate code, supports testing and code generation more fully, and is designed specifically for use within Spring Boot applications.

React, GraphQL и Relay - вполне себе нормальный компонентный подход (nodkz)

Pavel Chertorogov

The document discusses React, Relay, and GraphQL. It describes them as a "quite normal component approach" and provides overviews of each technology. For GraphQL, it highlights how GraphQL allows for single requests with nested data and any combinations of backend data sources. For Relay, it explains how Relay correlates components with GraphQL types and fragments to define necessary fields and render instructions. Live demos of a GraphQL server and Relay app are also referenced.

Build the API you want to see in the world

Michelle Garrett

The document discusses problems the author encountered with a third-party REST API and how GraphQL helped solve these issues. Some of the key problems included components being too tightly coupled to the API response, sending unnecessary data to clients, and inability to change data sources without rewriting the app. GraphQL provided instant documentation, allowed fetching related data in one query instead of multiple requests, encouraged better app structure, and provided more resilience to changing data sources. The author recommends GraphQL for applications that need to serve multiple clients, combine multiple data sources, or enforce better coding practices.

GraphQL Will Do To REST What JSON Did To XML

Roy Derks

Why GraphQL will become the new standard for accessing external data in your React Native app. I will show how using GraphQL instead of REST services the development process becomes even more declarative as GraphQL will take away the (imperative) hassle of tying data from multiple endpoints together. This will increase the level of complexity in React Native development, while also increasing the performance of the application.

What could go wrong with a GraphQL query and can OpenTelemetry help? KubeCon...

SonjaChevre

GraphQL is convenient for developers because it allows them to ask for exactly what they want and get the data they need without hassle. But running GraphQL in production can be incredibly challenging. Pinpointing the exact source of a GraphQL error is like searching for a needle in a haystack. It requires sifting through layers of data fetching logic, resolver functions and upstream services, hoping to stumble upon the culprit. But OpenTelemetry can help... Recording: https://youtu.be/IkEUJjRBCbo?feature=shared

GraphQL Introduction with Spring Boot

vipin kumar

This document provides an introduction to GraphQL, including: 1. It summarizes REST and some of its limitations like overfetching/underfetching and multiple network requests. 2. GraphQL is introduced as a new approach focused on the client's data needs through queries rather than the server's resources. It allows clients to request specific data fields from multiple objects in a single request. 3. The document explains GraphQL concepts like queries, mutations, subscriptions, schemas defined using SDL, and query resolvers that map the schema to execution. 4. It provides an example of implementing GraphQL with a blog service using Spring Boot and discusses some performance tradeoffs and challenges of GraphQL.

Graphql presentation

Vibhor Grover

The Power of RxJS in Nativescript + Angular

Tracy Lee

GraphQL - A query language to empower your API consumers (NDC Sydney 2017)

Rob Crowley

The shift to microservices, cloud native and rich web apps have made it challenging to deliver compelling API experiences. REST, as specified in Roy Fielding’s seminal dissertation, has become the architectural pattern of choice for APIs and when applied correctly allows for clients and servers to evolve in a loosely coupled manner. There are areas however where REST can deliver less than ideal client experiences. Often many HTTP requests are required to render a single view. While this may be a minor concern for a web app running on a WAN with low latency and high bandwidth, it can yield poor client experiences for mobile clients in particular. GraphQL is Facebook’s response to this challenge and it is quickly proving itself as an exciting alternative to RESTful APIs for a wide range of contexts. GraphQL is a query language that provides a clean and simple syntax for consumers to interrogate your APIs. These queries are strongly types, hierarchical and enable clients to retrieve only the data they need. In this session, we will take a hands-on look at GraphQL and see how it can be used to build APIs that are a joy to use.

We Are Developers - Modern React (Suspense, Context, Hooks) - Roy Derks

Roy Derks

Rails Vs CakePHP

Gautam Rege

The document compares PHP and Ruby, and the web frameworks CakePHP and Ruby on Rails. It discusses the key features and differences between PHP and Ruby, and demonstrates how a simple blog application can be created from scratch in under a minute using Ruby on Rails with no coding required, compared to the additional coding needed in CakePHP. The document argues that Ruby on Rails is more productive and fully-featured compared to CakePHP.

Spring GraphQL

VMware Tanzu

GraphQL with .NET Core Microservices.pdf

Knoldus Inc.

Writing highly scalable WebSocket using the Atmosphere Framework and Scala

jfarcand

- The document discusses the Atmosphere Framework, an open-source Java library that allows web applications to communicate in real-time via WebSocket or Comet techniques. - It provides a uniform API that hides the complexities of different browser and server WebSocket implementations and allows fallback to alternative techniques like Comet. - The framework integrates with various Java web servers and frameworks and supports Servlet, RESTful, and native WebSocket APIs to build scalable real-time applications.

Cqrs api v2

Brandon Mueller

The document discusses approaches to designing REST APIs, including CRUD and Commanding patterns. CRUD uses standard HTTP verbs like GET, POST, PUT, DELETE on resource URLs to perform basic operations. Commanding adds verbs as endpoints to initiate actions on resources. For example, POST /barns/11/reroof to trigger roof repair. It recommends separating commands from queries using CQRS and following DDD principles to model the domain accurately in the API.

Crafting APIs

Tatiana Al-Chueyr

The document discusses tips for crafting APIs according to REST principles. It outlines best practices like using nouns for resource identifiers, applying CRUD operations consistently via POST, GET, PUT, DELETE, and including hypermedia links to allow navigating through application states. Other topics covered include API versioning, error handling, and choosing an implementation technology based on performance needs like number of daily accesses. The document emphasizes designing APIs pragmatically with the goal of making them easy for application developers to use.

GraphQL vs. (the) REST

coliquio GmbH

What comes to you if you want to have some fun with GraphQL? Join us for the meetup in Munich and enjoy the interesting talk about ‚GraphQL vs. (the) REST ‘. In this session our colleagues Tsvetan Nikolov (Senior Developer at coliquio) and Tom Sedlmeier (Senior Developer at coliquio) will discuss the basic concepts and how to use them. We will present you GraphQL on the backend and on the client side with Apollo.

Similar to Wrapping and securing REST APIs with GraphQL (20)

Michelle Garrett - Build the API you want to see in the world (with GraphQL) ...

Wrapping and Securing REST APIs with GraphQL

GraphQL-ify your APIs - Devoxx UK 2021

React, GraphQL и Relay - вполне себе нормальный компонентный подход (nodkz)

Build the API you want to see in the world

GraphQL Will Do To REST What JSON Did To XML

What could go wrong with a GraphQL query and can OpenTelemetry help? KubeCon...

GraphQL Introduction with Spring Boot

Graphql presentation

The Power of RxJS in Nativescript + Angular

GraphQL - A query language to empower your API consumers (NDC Sydney 2017)

We Are Developers - Modern React (Suspense, Context, Hooks) - Roy Derks

Rails Vs CakePHP

Spring GraphQL

GraphQL with .NET Core Microservices.pdf

Writing highly scalable WebSocket using the Atmosphere Framework and Scala

Cqrs api v2

Crafting APIs

GraphQL vs. (the) REST

More from Roy Derks

Web Applications of the Future: GraphQL and TypeScript | React Alicante

Roy Derks

Why GraphQL is Perfect for Node.js Microservices - IJS London 2022

Roy Derks

GraphQL and microservices architectures are perfectly compatible. You can use GraphQL as a data layer for these microservices and combine data from all these services into one universal API. This way, you can break the core of your services into different microservices while still providing one endpoint that your clients can interact with. In this talk, we dive into GraphQL, microservices in Node.js, and why they are the perfect combination. Find the code example here https://github.com/stepzen-dev/stepzen-datalayer-microservices

Why GraphQL Is Perfect For Microservices - CityJS London 2022

Roy Derks

GraphQL and microservices architectures are perfectly compatible. You can use GraphQL as a data layer for these microservices and combine data from all these services into one universal API. This way, you can break the core of your services into different microservices while still providing one endpoint that your clients can interact with. Before diving into GraphQL, let's explore what microservices are and why it can be helpful to add GraphQL.

Workshop State-management in React with Context and Hooks

Roy Derks

This document discusses state management in React using Context and Hooks. It introduces Context as a way to pass data through the component tree without drilling props. Hooks like useContext, useReducer, and custom hooks are demonstrated as ways to consume Context values and update state. The document compares Context to other state management solutions and recommends Context is best for global state while local component state may still be handled with useState.

GraphQL Authentication

Roy Derks

This document outlines Roy Derks' workshop on authentication in GraphQL. The workshop includes an introduction to JSON Web Tokens (JWTs) and OAuth flows, as well as demonstrations of handling authentication via the GraphQL context, resolvers, and schema. It also covers encoding and decoding JWTs using a secret. The workshop concludes with exercises for attendees to practice these authentication concepts in breakout rooms.

Web Applications of the Future with TypeScript and GraphQL

Roy Derks

Testing GraphQL in Your JavaScript Application: From Zero to Hundred Percent

Roy Derks

This document discusses strategies for testing GraphQL applications from the initial development phases through integration and end-to-end testing. Key aspects that can be tested include GraphQL schemas through importing and mocking the schema, resolvers which are pure functions that are easy to test in isolation, integration through schema mocking and resolver testing with server mocking, and client-side testing by mocking the GraphQL client. End-to-end testing involves testing against real servers, and load testing can also be done to test performance. The document emphasizes that testing GraphQL applications involves static type checking, unit tests, integration tests, end-to-end tests, and load testing.

Open-sourcing JavaScript at the City of Amsterdam - All Things Open 2019

Roy Derks

Did you knew the City of Amsterdam has developed over 125 open-source projects? Also, many of those are build using JavaScript and are using other open-source packages and tools included in the JavaScript ecosystem. The City of Amsterdam is pioneering the field of open-source development by local governments worldwide. But how do we incorporate Open Standards into our projects, choose which packages to use, maintain our repositories and keep our codebase reliable?

Handling Large-Scale State-Management with React Context and Hooks

Roy Derks

Using ReasonML For Your Next JavaScript Project

Roy Derks

Boilerplates Are The New Copy-Paste

Roy Derks

Workshop JavaScript ES6+

Roy Derks

This document summarizes an introductory workshop on JavaScript ES6/7/8 features. It discusses what ES stands for and how versioning works. Key topics that will be covered in the workshop include importing modules, arrow functions, spread/rest operators, classes, let & constants, template literals, object literals, destructuring, and more. Links are provided for code examples on CodePen to demonstrate each feature. The document also discusses how newer JavaScript features like promises and async/await help solve issues like "callback hell" from previous versions.

More from Roy Derks (12)

Web Applications of the Future: GraphQL and TypeScript | React Alicante

Why GraphQL is Perfect for Node.js Microservices - IJS London 2022

Why GraphQL Is Perfect For Microservices - CityJS London 2022

Workshop State-management in React with Context and Hooks

GraphQL Authentication

Web Applications of the Future with TypeScript and GraphQL

Testing GraphQL in Your JavaScript Application: From Zero to Hundred Percent

Open-sourcing JavaScript at the City of Amsterdam - All Things Open 2019

Handling Large-Scale State-Management with React Context and Hooks

Using ReasonML For Your Next JavaScript Project

Boilerplates Are The New Copy-Paste

Workshop JavaScript ES6+

Recently uploaded

JavaLand 2024: Application Development Green Masterplan

Miro Wengner

Choosing The Best AWS Service For Your Website + API.pptx

Brandon Minnick, MBA

Have you ever been confused by the myriad of choices offered by AWS for hosting a website or an API? Lambda, Elastic Beanstalk, Lightsail, Amplify, S3 (and more!) can each host websites + APIs. But which one should we choose? Which one is cheapest? Which one is fastest? Which one will scale to meet our needs? Join me in this session as we dive into each AWS hosting service to determine which one is best for your scenario and explain why!

Monitoring and Managing Anomaly Detection on OpenShift.pdf

Tosin Akinosho

Monitoring and Managing Anomaly Detection on OpenShift Overview Dive into the world of anomaly detection on edge devices with our comprehensive hands-on tutorial. This SlideShare presentation will guide you through the entire process, from data collection and model training to edge deployment and real-time monitoring. Perfect for those looking to implement robust anomaly detection systems on resource-constrained IoT/edge devices. Key Topics Covered 1. Introduction to Anomaly Detection - Understand the fundamentals of anomaly detection and its importance in identifying unusual behavior or failures in systems. 2. Understanding Edge (IoT) - Learn about edge computing and IoT, and how they enable real-time data processing and decision-making at the source. 3. What is ArgoCD? - Discover ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes, and its role in deploying applications on edge devices. 4. Deployment Using ArgoCD for Edge Devices - Step-by-step guide on deploying anomaly detection models on edge devices using ArgoCD. 5. Introduction to Apache Kafka and S3 - Explore Apache Kafka for real-time data streaming and Amazon S3 for scalable storage solutions. 6. Viewing Kafka Messages in the Data Lake - Learn how to view and analyze Kafka messages stored in a data lake for better insights. 7. What is Prometheus? - Get to know Prometheus, an open-source monitoring and alerting toolkit, and its application in monitoring edge devices. 8. Monitoring Application Metrics with Prometheus - Detailed instructions on setting up Prometheus to monitor the performance and health of your anomaly detection system. 9. What is Camel K? - Introduction to Camel K, a lightweight integration framework built on Apache Camel, designed for Kubernetes. 10. Configuring Camel K Integrations for Data Pipelines - Learn how to configure Camel K for seamless data pipeline integrations in your anomaly detection workflow. 11. What is a Jupyter Notebook? - Overview of Jupyter Notebooks, an open-source web application for creating and sharing documents with live code, equations, visualizations, and narrative text. 12. Jupyter Notebooks with Code Examples - Hands-on examples and code snippets in Jupyter Notebooks to help you implement and test anomaly detection models.

Digital Marketing Trends in 2024 | Guide for Staying Ahead

Wask

https://www.wask.co/ebooks/digital-marketing-trends-in-2024 Feeling lost in the digital marketing whirlwind of 2024? Technology is changing, consumer habits are evolving, and staying ahead of the curve feels like a never-ending pursuit. This e-book is your compass. Dive into actionable insights to handle the complexities of modern marketing. From hyper-personalization to the power of user-generated content, learn how to build long-term relationships with your audience and unlock the secrets to success in the ever-shifting digital landscape.

Salesforce Integration for Bonterra Impact Management (fka Social Solutions A...

Jeffrey Haguewood

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on integration of Salesforce with Bonterra Impact Management. Interested in deploying an integration with Salesforce for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

FREE A4 Cyber Security Awareness Posters-Social Engineering part 3

Data Hops

How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf

Chart Kalyan

Energy Efficient Video Encoding for Cloud and Edge Computing Instances

Alpen-Adria-Universität

Astute Business Solutions | Oracle Cloud Partner |

AstuteBusiness

Columbus Data & Analytics Wednesdays - June 2024

Jason Packer

Best 20 SEO Techniques To Improve Website Visibility In SERP

Pixlogix Infotech

GraphRAG for Life Science to increase LLM accuracy

Tomaz Bratanic

June Patch Tuesday

Ivanti

Ivanti’s Patch Tuesday breakdown goes beyond patching your applications and brings you the intelligence and guidance needed to prioritize where to focus your attention first. Catch early analysis on our Ivanti blog, then join industry expert Chris Goettl for the Patch Tuesday Webinar Event. There we’ll do a deep dive into each of the bulletins and give guidance on the risks associated with the newly-identified vulnerabilities.

Driving Business Innovation: Latest Generative AI Advancements & Success Story

Safe Software

Are you ready to revolutionize how you handle data? Join us for a webinar where we’ll bring you up to speed with the latest advancements in Generative AI technology and discover how leveraging FME with tools from giants like Google Gemini, Amazon, and Microsoft OpenAI can supercharge your workflow efficiency. During the hour, we’ll take you through: Guest Speaker Segment with Hannah Barrington: Dive into the world of dynamic real estate marketing with Hannah, the Marketing Manager at Workspace Group. Hear firsthand how their team generates engaging descriptions for thousands of office units by integrating diverse data sources—from PDF floorplans to web pages—using FME transformers, like OpenAIVisionConnector and AnthropicVisionConnector. This use case will show you how GenAI can streamline content creation for marketing across the board. Ollama Use Case: Learn how Scenario Specialist Dmitri Bagh has utilized Ollama within FME to input data, create custom models, and enhance security protocols. This segment will include demos to illustrate the full capabilities of FME in AI-driven processes. Custom AI Models: Discover how to leverage FME to build personalized AI models using your data. Whether it’s populating a model with local data for added security or integrating public AI tools, find out how FME facilitates a versatile and secure approach to AI. We’ll wrap up with a live Q&A session where you can engage with our experts on your specific use cases, and learn more about optimizing your data workflows with AI. This webinar is ideal for professionals seeking to harness the power of AI within their data management systems while ensuring high levels of customization and security. Whether you're a novice or an expert, gain actionable insights and strategies to elevate your data processes. Join us to see how FME and AI can revolutionize how you work with data!

“Temporal Event Neural Networks: A More Efficient Alternative to the Transfor...

Edge AI and Vision Alliance

For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/temporal-event-neural-networks-a-more-efficient-alternative-to-the-transformer-a-presentation-from-brainchip/ Chris Jones, Director of Product Management at BrainChip , presents the “Temporal Event Neural Networks: A More Efficient Alternative to the Transformer” tutorial at the May 2024 Embedded Vision Summit. The expansion of AI services necessitates enhanced computational capabilities on edge devices. Temporal Event Neural Networks (TENNs), developed by BrainChip, represent a novel and highly efficient state-space network. TENNs demonstrate exceptional proficiency in handling multi-dimensional streaming data, facilitating advancements in object detection, action recognition, speech enhancement and language model/sequence generation. Through the utilization of polynomial-based continuous convolutions, TENNs streamline models, expedite training processes and significantly diminish memory requirements, achieving notable reductions of up to 50x in parameters and 5,000x in energy consumption compared to prevailing methodologies like transformers. Integration with BrainChip’s Akida neuromorphic hardware IP further enhances TENNs’ capabilities, enabling the realization of highly capable, portable and passively cooled edge devices. This presentation delves into the technical innovations underlying TENNs, presents real-world benchmarks, and elucidates how this cutting-edge approach is positioned to revolutionize edge AI across diverse applications.

Main news related to the CCS TSI 2023 (2023/1695)

Jakub Marek

An English 🇬🇧 translation of a presentation to the speech I gave about the main changes brought by CCS TSI 2023 at the biggest Czech conference on Communications and signalling systems on Railways, which was held in Clarion Hotel Olomouc from 7th to 9th November 2023 (konferenceszt.cz). Attended by around 500 participants and 200 on-line followers. The original Czech 🇨🇿 version of the presentation can be found here: https://www.slideshare.net/slideshow/hlavni-novinky-souvisejici-s-ccs-tsi-2023-2023-1695/269688092 . The videorecording (in Czech) from the presentation is available here: https://youtu.be/WzjJWm4IyPk?si=SImb06tuXGb30BEH .

Overcoming the PLG Trap: Lessons from Canva's Head of Sales & Head of EMEA Da...

saastr

TrustArc Webinar - 2024 Global Privacy Survey

TrustArc

How does your privacy program stack up against your peers? What challenges are privacy teams tackling and prioritizing in 2024? In the fifth annual Global Privacy Benchmarks Survey, we asked over 1,800 global privacy professionals and business executives to share their perspectives on the current state of privacy inside and outside of their organizations. This year’s report focused on emerging areas of importance for privacy and compliance professionals, including considerations and implications of Artificial Intelligence (AI) technologies, building brand trust, and different approaches for achieving higher privacy competence scores. See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe. This webinar will review: - The top 10 privacy insights from the fifth annual Global Privacy Benchmarks Survey - The top challenges for privacy leaders, practitioners, and organizations in 2024 - Key themes to consider in developing and maintaining your privacy program

Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack

shyamraj55

Nordic Marketo Engage User Group_June 13_ 2024.pptx

MichaelKnudsen27

Recently uploaded (20)

JavaLand 2024: Application Development Green Masterplan

Choosing The Best AWS Service For Your Website + API.pptx

Monitoring and Managing Anomaly Detection on OpenShift.pdf

Digital Marketing Trends in 2024 | Guide for Staying Ahead

Salesforce Integration for Bonterra Impact Management (fka Social Solutions A...

FREE A4 Cyber Security Awareness Posters-Social Engineering part 3

How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf

Energy Efficient Video Encoding for Cloud and Edge Computing Instances

Astute Business Solutions | Oracle Cloud Partner |

Columbus Data & Analytics Wednesdays - June 2024

Best 20 SEO Techniques To Improve Website Visibility In SERP

GraphRAG for Life Science to increase LLM accuracy

June Patch Tuesday

Driving Business Innovation: Latest Generative AI Advancements & Success Story

“Temporal Event Neural Networks: A More Efficient Alternative to the Transfor...

Main news related to the CCS TSI 2023 (2023/1695)

Overcoming the PLG Trap: Lessons from Canva's Head of Sales & Head of EMEA Da...

TrustArc Webinar - 2024 Global Privacy Survey

Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack

Nordic Marketo Engage User Group_June 13_ 2024.pptx

Wrapping and securing REST APIs with GraphQL

1. Wrapping and Securing REST APIs with GraphQL Nodejs Edinburgh Meetup 05/02/2019

2. What is this about? @gethackteam

3. @gethackteam

4. Who Am I? @gethackteam

5. @gethackteam Roy Derks @gethackteam Auth0 Ambassador #reactjs #ReactNative #GraphQL

6. Who is this for? @gethackteam

7. Who is this for? BACKEND @gethackteam

8. What is wrong with REST? @gethackteam

9. REST has multiple endpoints that return ﬁxed data structures @gethackteam

10. Let’s look at an example REST API @gethackteam

11. What is wrong with REST? Multiple Endpoints @gethackteam

12. What is wrong with REST? Multiple Endpoints 1 @gethackteam

13. What is wrong with REST? Multiple Endpoints 1 2 @gethackteam

14. What is wrong with REST? Multiple Endpoints 1 2 3 @gethackteam

15. Why not create one endpoint with all information? @gethackteam

16. What is wrong with REST? Multiple Endpoints @gethackteam

17. What is wrong with REST? Multiple Endpoints @gethackteam

18. What is wrong with REST? Multiple Endpoints @gethackteam

19. Why not specify parameters you want to receive? @gethackteam

20. What is wrong with REST? Under/Over-fetching @gethackteam

21. SHOW What is wrong with REST? Under/Over-fetching @gethackteam

22. SHOW What is wrong with REST? Under/Over-fetching @gethackteam

23. SHOW What is wrong with REST? Under/Over-fetching 2 1 @gethackteam

24. But how does this affect the ﬁrst version of the application? @gethackteam

25. SHOW MORE What is wrong with REST? Versioning V1 V2 @gethackteam

26. SHOW MORE What is wrong with REST? Versioning V1 V2 Diﬀerent endpoints @gethackteam

27. SHOW MORE What is wrong with REST? Versioning V1 V2 Diﬀerent endpoints @gethackteam Diﬀerent parameters

28. SHOW MORE What is wrong with REST? Versioning V1 V2 Different endpoints @gethackteam Different parameters Different datastructures

29. How does GraphQL solve these problems? @gethackteam

30. How does GraphQL solve these problems? Multiple Endpoints @gethackteam

31. How does GraphQL solve these problems? Multiple Endpoints Over-fetching @gethackteam

32. How does GraphQL solve these problems? Multiple Endpoints Under-fetching (N+1) Over-fetching @gethackteam

33. How does GraphQL solve these problems? Multiple Endpoints Under-fetching (N+1) Over-fetching Versioning / Documentation@gethackteam

34. GraphQL has a single endpoint that returns ﬂexible data structures @gethackteam

35. How does GraphQL Solve This Multiple Endpoints @gethackteam

36. How does GraphQL Solve This Multiple Endpoints @gethackteam

37. How does GraphQL Solve This Multiple Endpoints GET Query @gethackteam

38. How does GraphQL Solve This Multiple Endpoints Mutation POST PUT PATCH DELETE GET Query @gethackteam

39. How does GraphQL Solve This Multiple Endpoints Mutation POST PUT PATCH DELETE GET Query @gethackteam

40. How does GraphQL Solve This Single endpoint

41. How does GraphQL Solve This Single endpoint

42. How does GraphQL Solve This Single endpoint Describe the data structure

43. How does GraphQL Solve This Single endpoint Describe the data structure Set the possible queries

44. How does GraphQL Solve This Single endpoint

45. How does GraphQL Solve This Single endpoint Set dynamic parameters

46. Specify which data to return How does GraphQL Solve This Single endpoint Set dynamic parameters

47. How does GraphQL Solve This Single endpoint

48. How does GraphQL Solve This Single endpoint Predictable return result

49. Sounds great! How can I implement this? @gethackteam

50. BACKEND Implementation @gethackteam

51. BACKEND Implementation @gethackteam

52. Implementation Existing services Database(s) Third-party API @gethackteam

53. Implementation Existing services Database(s) Third-party API @gethackteam

54. Implementation Existing services Database(s) Third-party API @gethackteam

55. Implementation @gethackteam

56. Implementation @gethackteam Node.js API Server

57. Implementation @gethackteam Node.js API Server Apollo Express GraphQL Server

58. Implementation @gethackteam

59. Implementation Schemas @gethackteam

60. Implementation Schemas @gethackteam Match data to schema

61. Implementation @gethackteam

62. Implementation Retrieve data from source @gethackteam

63. Implementation Retrieve data from source Get information from headers @gethackteam

64. Implementation @gethackteam

65. Implementation Initialise the Node.js / GraphQL server @gethackteam

66. Data Sources @gethackteam

67. Data Sources @gethackteam

68. Data Sources @gethackteam Fetch REST endpoint

69. https://github.com/royderks/ auth0-graphql-rest/tree/ datasources @gethackteam

70. Cool, let’s add Authentication @gethackteam

71. Add Authentication @gethackteam

72. Add Authentication @gethackteam

73. Add Authentication Middleware to validate JWT @gethackteam

74. Add Authentication Middleware to validate JWT Retrieve key from JWT @gethackteam

75. Add Authentication Middleware to validate JWT Retrieve key from JWT Validate JWT scopes @gethackteam

76. Add Authentication @gethackteam

77. Add Authentication Don’t break when token is incorrect or missing @gethackteam

78. Add Authentication Don’t break when token is incorrect or missing Add middleware to endpoint @gethackteam

79. Add Authentication @gethackteam

80. Add Authentication Get information from headers @gethackteam

81. Add Authentication Get information from headers @gethackteam

82. Add Authentication Get information from headers Pass to REST endpoint @gethackteam

83. https://github.com/royderks/ auth0-graphql-rest @gethackteam

84. To summarise.. @gethackteam

85. GraphQL can be built on top of your existing data and code @gethackteam

86. Want to learn more? @gethackteam #javascriptEverywhere https://auth0.com/ https://howtographql.com

Wrapping and securing REST APIs with GraphQL

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Wrapping and securing REST APIs with GraphQL

Similar to Wrapping and securing REST APIs with GraphQL (20)

More from Roy Derks

More from Roy Derks (12)

Recently uploaded

Recently uploaded (20)

Wrapping and securing REST APIs with GraphQL