REST API Design, Development & Management from Udemy

What's inside

Learning objectives

Design and develop restful api by applying the best practices & rest constraints
Create practices for api security, versioning, lifecycle management, documentation and other important aspects
Write specifications in swagger2.0/oai specifications in yaml format

Create an api management strategy for your enterprise
Leverage some of the common api management platforms for building api proxies (apigee, ibm api connect, mulesoft anypoint)

Design and develop restful api by applying the best practices & rest constraints
Create practices for api security, versioning, lifecycle management, documentation and other important aspects
Write specifications in swagger2.0/oai specifications in yaml format
Create an api management strategy for your enterprise
Leverage some of the common api management platforms for building api proxies (apigee, ibm api connect, mulesoft anypoint)

Syllabus

Setting the stage

Quick introduction to the course
Tips on how to get the most out of this course

Provides link for summary decks download.

ACME Travels is a fictitious company that is going through a crisis as they did not keep up to speed with the technology. Their CTO has a vision to create an API driven organization.

This quick lecture describes the ACME case study that will be used in discussions of various concepts discussed in this course. All APIs created in the course are for ACME travels.

In this course multiple tools will be used. This quick lecture describes the tools that will be used in this course. Students are not expected to have any prior experience with any of the tools discussed

In this lecture students will learn about the free MongoDB sandbox environment offered by http://mlab.com

Samples in this course will use the MongoDB instance on mlab.com

Evolution of RESTful services

Walkthrough of a scenario to explain what an API is.

Students will learn about the

Issues with using XML/RPC for mobile applications
History of RESTful API
How so many organizations are leveraging REST API

Students will learn the core concepts of RESTful API. At end of the lecture they would understand the following terms:

Representational state
Resources
State transfer

Also covers the demonstration of a publicly available REST API from Walmart.

Checks students understanding of general concepts of API

Students will learn about the three types of APIs.

In this lecture students will learn about the API exposed by TicketMaster.

Student will learn about:

the API value chain
"common sense" design principles :)

Students will learn the REST architecture constraints, guidelines & best practices for designing the REST API

Just using the JSON+HTTP does not automatically make the API RESTful. In this student will get a overview of the REST constraints described by Roy Fielding in his dissertation paper.

Student will learn about the benefit of following the "Client-Server" constraint which is considered the foundation for the RESTful API.

Student will learn about the constraint#2 Uniform Interface + the 4 guiding principles that are part of the Uniform Interface constraint.

Student will learn about the "Statelessness" constraint.

In this lecture student will learn

about the HTTP Caching headers
how the HTTP Cache-Control can be used to achieve better performance
how the caching strategy counterbalances the "performance" hit due to "statelessness"

Student how "Layered System" architecture enables a incremental evolutionary approach.

This lecture describes the (optional) REST constraint referred to as the "Code on Demand"

At the end of this lecture the Student will be able to evaluate the maturity level of an organization from the perspective of adoption of RESTful architecture & practices.

Test student's knowledge of REST architectural constraints.

WebApp versus REST API Architecture

Desigining REST API

Students will learn about the structure of the API Endpoint URL

Student will learn about:

Conventions used for "Base URL"
resource naming for REST API. Examples of how Facebook/Walmart ... are naming their resources

Walk through: Setup the API URI for ACME API

HTTP API Request flow and HTTP Status Code

Describes how to implement the API CRUD operations. Covers the use of HTTP verbs, status codes and how to implement the support for multiple data formats.

API Data Format Setup

You will be seeing the API(s) in actions. This lecture will provide you the steps to setup the local environment.

In this lecture students will learn how to create a simple API in Node. At the end of the lecture students are expected to be able to extend the vacations API to add more operations.

This quiz will test the student's understanding of how to implement basic operations & error handling for REST API.

Will teach students the error handling patterns

Students will how to implement error handling in REST API

Application Error Handling Patterns

Walk through of the code for demonstrating the error handling for REST API

Code available at https://www.github.com/acloudfan

Test student's knowledge of designing the error handling for their API

Versioning is an important aspect of REST API - students will learn about the API versioning strategy and implementation patterns

Students will learn about common changes required for API after they have been released. Also included is a discussion on practices for handling API changes.

Breaking change & how to handle it
Non-breaking change

Student will learn the common version strategies for the REST API. Also understand the API lifeservice from version perspective.

Walk through : ACME API Versioning

Caching may be implemented at multiple levels. Lectures discuss the caching patterns.

Students will learn

the benefits of Caching
practices around what to cache and the design decisions

Student will lear how to use the HTTP cache control directive

API implementations can use the HTTP header Cache-Control to take advantage of the HTTP protocol built in support for caching. In this lecture students will learn the various directives (instructions) they can use for building API with cache support.

This lecture demonstrates the use of the HTTP caching header from the Node JS API.

Checks students knowledge of general concepts of caching and Cache-Control directives.

Lecture in this section will discuss the response handling patterns

Its common for many popular API providers (Facebook, LinkedIn, Pinterest...) to support partial response in their APIs. In this lecture student will learn the benefits of supporting partial responses and they will see a demo of building API with support for partial responses (ACME Hotels API)

Students will see the implementation of partial response pattern

In this lecture students will learn common ways in which Pagination support may be implemented in an API. At the end of this lecture they would learn how to build pagination in a MongoDB/Node application using the limit/skip functions

Walk through : Building support for Pagination in ACME API

Checks students understanding of how to design API with support for partial responses and pagination

REST API Security

Student will learn about security aspects related to API:

Authentication
Authorization
Functional attacks

Basic authentication is the simplest form of authentication that may be applied to the API. Student will learns concepts and then understand how to code Basic Auth in Node JS code.

Tests the student on their understanding of Basic authentication

Student will learn:

What are tokens?
Jason Web Token (JWT) standard
Securing Node REST API with JWT

Checks student's understanding of Token based authentication and JWT

The API Key/Secret is the most common way the API providers protect the API. In this lecture student will learn about:

implementation of the key/secret
practices for the implementation of the key/secret
technical considerations for implementing key/secret base auth

Tests students understanding of concept of client key & secret

Student will learn the concepts of OAuth2.0.

In this lecture, student will also learn how Spotify (Streaming music) has implemented the OAuth2 for their public API.

Tests student's understanding of concepts of API authorization and OAuth 2.0

Hackers are always looking for threats/vulnerabilities in publicly available API. Student will learn abut common types of attack. In the lecture the student will also see a demonstration of a "SQLInjection" attack.

REST API Specifications using Swagger 2.0 / OAI

In this lecture student will learn:

contract first approach
collaborative specifications development process
different REST API specifications standard
introduction to Swagger/OAI standard

Checks student's knowledge of basic concepts of REST API specifications

In this lecture student will get an overview of he Swagger/OAI + YAML specifications. Also discuss the various editor options for Swagger/OIA

Tests the student on their knowledge of Swagger

Students will learn:

structure of the Swagger/OAI specs document
about the tools for Swagger/OAI document editing
to create the Swagger/OAI specifications in YAML format

Checks student's understanding of the specifications format

Student will learn how to define the following in Swagger/OAI specs:

Request/response schema
Security definitions
Parameters

Structure & Elements of Swagger/OAI specifications (2/3)

Student will learn how to create Paths/Operations in the Swagger/OAI specifications. Walkthrough of the developer documentation generated from the specifications.

Checks student's understanding of the Paths/Resources

API Management

In this lecture student will learn about the

Activities that fall under the scope of API management
Common API management infrastructure setup (Agent & Proxy model)

In this lecture student will learn about the practices for managing the API "Lifecycle" that has 5 stages.

How API developer productivity is enhanced by way of adoption of the API management platforms.

Demonstration of specification import process on the "Mulesoft" and "IBM API Connect" platform

Generate the API proxy on "Apigee" platform using the vacation specification generated in previous section. Apply policies to control the behavior of the API.

Student will learn about the essential features of the API developer portal. At the end of the lecture will be in a position to decide whether to build or buy a portal for their API.

At end of the lecture student will see how easily an off the shelf developer portal (Mulesoft) can easily be customized.

Students will learn about:

security best practices
the need for the minimal security (key) for the API
how API management based solution can be used for key authentication (demo on Apigee)

Student will learn

why an API provider MUST carry out traffic management
about types of traffic management policies (Quota, Spike arrest, Rate limiting)

Apigee

API Analytics is an important aspect of API management. There are multiple types of analytics collected on the API platform. Student will learn abut the common analytics collected on API platforms and how it can be leveraged by the developers.

Students will learn about the good practice that states "Treat your API like a product if you would like to sell it like a product".

Also the student will understand the

concept of monetization
various monetization models
technology considerations from the realization perspective

Good bye message + some tips on the next steps

Good bye

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Comprehensive study of REST API design, development, and management

Explores best practices and design patterns used by popular API providers like Facebook and Twitter

Taught by Rajeev Sakhuja, an industry expert with experience in building digital strategies for large organizations

Suitable for technologists with a basic understanding of web application architecture and data formats like JSON or XML

Covers practical aspects of API design using NodeJS-based API implementation

Provides guidance on API security, versioning, and management strategies

Reviews summary

Well-designed rest apis

Learners describe this course as a comprehensive learning experience on designing, developing, and managing RESTful APIs. Students say the course is a great starting point for both beginners and experienced developers. One of the best qualities of the course, according to learners, is its comprehensive coverage of the subject matter. The course is said to provide a wide range of information, from the basics of REST APIs to more advanced topics such as security and API management. The course also provides step-by-step instructions and hands-on examples, which learners say makes it easy to follow and understand. The instructor is described as knowledgeable and engaging, and the course materials are said to be well-organized and well-presented. Overall, learners say this is a high-quality course that they would recommend to anyone interested in learning more about REST APIs.

The course offers hands-on exercises and sample code, making it practical and easier to apply what you learn.

"The course provides hands-on examples and sample code for students to practice and apply their learnings."

"The hands-on examples are helpful for reinforcing the concepts."

The instructor explains the concepts clearly and provides detailed explanations, making the course easy to understand.

"The instructor is knowledgeable and engaging."

"The course materials are said to be well-organized and well-presented."

The materials for this course are logically and sequentially organized, helping you grasp the concepts easily.

"The course is well-organized and easy to follow."

"The step-by-step approach makes it easy for beginners to learn."

"The course is structured, clear, and well-presented, covering the complete domain of REST API development."

This course covers a wide range of topics related to REST APIs, making it a comprehensive learning resource.

"The course covers REST API fundamentals, design patterns, and best practices."

"The course covers how to add authentication and authorization to APIs, which is crucial for securing your API."

"The course emphasizes the importance of monitoring and provides guidance on how to monitor your API for optimal performance."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in REST API Design, Development & Management with these activities:

Review Course Materials and Notes

Show steps

Strengthens understanding by reviewing course concepts and assignments.

Show steps

Review lecture notes and slides.
Summarize key concepts and design principles.
Identify areas for further exploration.

Explore API Security Best Practices

Show steps

Enhances understanding of essential security measures for RESTful APIs.

Browse courses on Authentication and Authorization

Show steps

Learn about common API vulnerabilities.
Explore industry-standard authentication and authorization mechanisms.
Implement security measures in API code.

Practice RESTful API Development

Show steps

Helps develop familiarity with RESTful API development through repetitive exercises.

Show steps

Create a mock endpoint using a programming language of your choice.
Implement CRUD operations for the endpoint.
Handle edge cases and error scenarios.
Explore different HTTP request methods and responses.

Two other activities

Expand to see all activities and additional details

Show all five activities

Participate in API Design Discussions

Show steps

Encourages collaboration and exchange of ideas on RESTful API design.

Show steps

Join online forums or discussion groups.
Participate in discussions and ask questions.
Share knowledge and insights with other developers.

Design and Implement a RESTful API

Show steps

Applies learned concepts by designing and implementing a comprehensive RESTful API.

Show steps

Define API requirements and use cases.
Design and document API endpoints and data models.
Implement API functionality using a preferred programming language.
Test and deploy the API.

Career center

Learners who complete REST API Design, Development & Management will develop knowledge and skills that may be useful to these careers:

Technical Product Manager

A Technical Product Manager works on the development and management of a technology-based product or software from concept to delivery, and is responsible for creating and maintaining the roadmap, and working with technical teams on its implementation. This course can help build a foundation for this role by teaching the fundamentals of REST API design, development, and management, which is essential for creating and maintaining a successful software product.

See salaries and explore the career path for Technical Product Manager

Software Architect

A Software Architect is responsible for designing, building, and maintaining the software architecture of a software system. This course can be helpful for those looking to enter this role as it teaches the fundamentals of REST API design, development, and management, including patterns and best practices. These skills are essential for designing and building scalable, reliable, and secure software systems.

See salaries and explore the career path for Software Architect

Software Developer

A Software Developer designs, develops, and maintains software applications. This course can be helpful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge is essential for developing robust, scalable, and user-friendly software applications.

See salaries and explore the career path for Software Developer

Systems Analyst

A Systems Analyst works with users and stakeholders to understand their needs and develop and implement software solutions. This course can be helpful for those looking to enter this role as it teaches the fundamentals of REST API design, development, and management. This knowledge is essential for designing, developing, and implementing scalable, reliable, and secure software solutions.

See salaries and explore the career path for Systems Analyst

Data Architect

A Data Architect designs, develops, and maintains the data architecture of an organization. Although this course does not directly teach data architecture, it provides a foundation in API design, development, and management, which is essential for designing data architectures that are scalable, reliable, and secure.

See salaries and explore the career path for Data Architect

Quality Assurance Analyst

A Quality Assurance Analyst is responsible for testing and evaluating software applications to ensure they meet quality standards. This course can help build a foundation for this role by teaching the fundamentals of REST API design, development, and management. This knowledge is essential for testing and evaluating the quality of software applications.

See salaries and explore the career path for Quality Assurance Analyst

Technical Writer

A Technical Writer creates and maintains technical documentation for software applications and products. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding and documenting the technical aspects of software applications and products.

See salaries and explore the career path for Technical Writer

Product Owner

A Product Owner is responsible for managing the development of a software product or feature. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding the technical aspects of software development and working with technical teams.

See salaries and explore the career path for Product Owner

Business Analyst

A Business Analyst works with users and stakeholders to understand their needs and develop and implement software solutions. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding the technical aspects of software solutions and working with technical teams.

See salaries and explore the career path for Business Analyst

IT Consultant

An IT Consultant helps organizations improve their use of technology. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding the technical aspects of software and working with clients on software solutions.

See salaries and explore the career path for IT Consultant

UX Designer

A UX Designer is responsible for designing the user interface and experience of software applications and products. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding the technical aspects of software development and designing user interfaces that are intuitive and user-friendly.

See salaries and explore the career path for UX Designer

IT Manager

An IT Manager is responsible for managing the IT department of an organization. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding the technical aspects of software and managing IT teams.

See salaries and explore the career path for IT Manager

Network Engineer

A Network Engineer designs, implements, and maintains networks for organizations. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding the technical aspects of networks and working with network teams.

See salaries and explore the career path for Network Engineer

Security Engineer

A Security Engineer designs, implements, and maintains security systems for organizations. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding the technical aspects of security and working with security teams.

See salaries and explore the career path for Security Engineer

Database Administrator

A Database Administrator designs, implements, and maintains databases for organizations. This course may be useful for those looking to enter this role as it provides a foundation in REST API design, development, and management. This knowledge can help in understanding the technical aspects of databases and working with database teams.

See salaries and explore the career path for Database Administrator