API Strategy & Practice Conference 2017

"Have you been tasked to build the most powerful weapon in the universe? No? How about an enterprise website which both consumes external and provides its own APIs?

Whatever your task is, secure architecture is key. And while putting an exhaust port on the reactor core seems like a good idea, trust me when I say it'll blow up in your face later.

Web development is no different. What seems like a simple decision at the outset, or an overlooked detail may turn out to cause severe issues later on.

During this session we’ll take a look at how to architect for success and security when building a website which connects to external systems and while providing access to data. By building security in from the beginning you can help prevent a young Jedi shooting a proton torpedo through a hole the size of a wamp rat and destroying your hard work.

We’ll cover:
• Overview of common API authentication and security methods
• Using capabilities instead of roles to define security
• How to store and access keys and tokens in your website
• Providing an API to access your website data
• Common mistakes developers make when creating APIs

A session for developers of all skills and abilities, this will be an interactive time filled with lessons learned and examples from the real world, including some recent examples of how a single exposed API can prove catastrophic. Just promise that afterwards you’ll use what you learn for the good of the galaxy and that you won't go build a planet sized weapon of mass destruction."