Nordic APIs Platform Summit 2016
| title | author | length |
|---|---|---|
| The REST And Then Some | Asbjørn Ulsberg | 20m |
Rest methods don't map cleanly to CRUD and PUT means replace or create not update, so the talk demonstrates use of JSON Patch for partial updates and explains… | ||
| Is GraphQL the end of RESTstyle APIs | Joakim Lundborg | 18m |
Argues GraphQL can replace many REST patterns by cutting round trips and eliminating overfetching and underfetching, demonstrates a working schedule API built… | ||
| Versioning strategy for a complex internal API | Konstantin Yakushev | 19m |
Internal RPC/protobuf mobile API (JSON for web) uses client‑server capability negotiation: client sends supported feature list and flags like… | ||
| How Spotify Payments Creates APIs to Manage Complexity | Horia Jurcut | 22m |
Spotify runs 16 payment providers across 60+ markets and builds two internal APIs: a checkout API that makes clients stateless and drives a backend state… | ||
| Building Serverless API Backends | Rich Jones | 19m |
Advocates moving APIs to AWS Lambda + API Gateway using the Zappa framework to cut ops and cost: examples claim 30ms function lifetimes, 3 million free seconds… | ||
| The end of polling | audrey neveu | 26m |
Compares WebSockets and Server-Sent Events with concrete tradeoffs: SSE is unidirectional, reuses HTTP, defines data/id/retry fields and built‑in reconnection… | ||
| Microservice Gardening | Erik Wilde | 37m |
Microservices require treating the landscape as a decentralized, evolving ecosystem: apply lessons from the Web and bureaucracy to prioritize loose coupling… | ||
| Automotive Grade APIs – designing for longevity | Henrik Segesten | 15m |
Claim: automotive-grade APIs mean designing for 30–40 year longevity, because cars can sit 10 years offline and then hit current services, forcing support for… | ||
| OAuth 2.0 and the Internet of Things (IoT) | Jacob Ideskog | 20m |
Shows how OAuth 2.0 adapts to IoT by turning bearer tokens into proof-of-possession tokens: an authorization server issues an authorization code, the client or… | ||
| Operational API design anti-patterns | Jason Harmon | 29m |
A GET landing token causes browser caching that breaks kiosk flows so switching to POST fixes it; a Zapier poll every 5 minutes across 90 million forms drives… | ||
| Will Open Banking trigger the API of Me? | Chris Wood | 19m |
Claims that open banking (PSD2 / CMA pressure) can feed a real personal data store that exposes an “API of Me” for curated, authorized sharing. Demonstrations… | ||
| Humpty Dumpty A story of API DevOps Gone Wrong | Emily Dowdle | 17m |
Compares a failed production deploy to Humpty Dumpty and claims cultural fixes beat finger‑pointing: enforce environment parity (dev/staging/prod), give… | ||
| Platform Security that will Last for Decades | Travis Spencer | 32m |
Identity is the single biggest bottleneck for platforms over decades and the practical solution is a standards-based stack: OAuth2, OpenID Connect, HTTP/2 and… | ||
| Secure and accelerate APIs' lifecycle with the OpenAPI specification | Arnaud Lauret | 19m |
OpenAPI (formerly Swagger) proves to be a machine-readable contract that teams use to generate mocks and interactive docs, run automated tests (Dredd… | ||
| The Adventure of Enabling API Management in a Large Enterprise | Josh Wang | 21m |
A Bosch project implements an API management platform (xway) to expose device data and goes live next week after answering 200 requirements. Installation… | ||
| nothing matches | ||