Architecting eCommerce APIs - Gluecon 13

•

0 gostou•558 visualizações

Saranyan Vigraham

Gluecon 2013 talk on eCommerce API architecture

Tecnologia

Architecting e-Commerce APIs

Saranyan Vigraham
@saranyan, Tech Guy, Bigcommerce)

Rigid - Hard to Change
Too many parts get affected by a change

Fragile - Unexpected things
Something else breaks

No re-usability
It is part of the “core code”

We are forced to rethink our architectures
Website and Mobile

Templates
Database
MVC

Mobile Templates
MVC

Templates
Database

Static Assets
Mobi
MVC

Mobile Templates

Static Assets

Templates
Database
MVC

Static Assets

Website

Templates
MVC

Static Assets

Mobile

Templates
MVC

Static Assets

Native App

Native App API

Database

The Big Ball of Mud

Brian Foote and Joseph Yoder, laputan.org/mud

Everything is a service!

UI

UI

API Layer

UI

Everything is a service!

API Layer

Payments

Orders

...

Authentication

Everything is a service!

API Layer

Payments

Orders

Service Container

Single
Code Base

...

Authentication

Everything is a service!

API Layer

Payments

Orders

Service Container

X
Single
Code Base

...

Authentication

Everything is a service!

API Layer

Single
Code Base

Payments

Orders

Service Container

...

Authentication

Liskov Substitution

Client

Service 1

Service 2

Service 3

Liskov Substitution

API Layer

Single
Code Base

Payments

Shipping

...

Authentication

Service Container

New Authentication
System

Shipping Service
2.0
New Service Container

Interface Segregation

Single
Code Base
API Layer

Payments

Orders

Service Container

...

Authentication

Interface Segregation
Single
Code Base

UI

UI

API Layer

Payments

Orders

Service Container

...

Authentication

Interface Segregation

API Layer

Payments

Orders

Service Container

Single
Code Base

...

Authentication

Re-cap
• Everything is a service

• Single codebase - Creation of
sandboxes, provisioning, etc

• Liskov substitution

• Interface Segregation

?

@saranyan
https://developer.bigcommerce.com

Mais conteúdo relacionado

Mais procurados

There’s an inherent tension for organizations doing API development: how to keep both your API developers as well as your infrastructure happy, at the same time. Decoupling front-end and back-end development allows parallel development, and helps keep your front-end, middle-end, and back-end efforts working asynchronously. This speeds progress, but requires far more – and far better – collaboration to be successful. Even an independent developer working with APIs requires good collaboration tools. In this talk, Abhinav Asthana will provide tips on how to improve in API development using collaboration tools like executable API descriptions, API mock servers, and documentation. He will include specific examples of how companies (such as VMware, Coursera, and AMC Theatres) have used collaboration to attain more agile development, to onboard developers, and to ensure input from all participants/stakeholders.

Pain Points In API Development? They’re Everywhere

Nordic APIs

apidays LIVE Jakarta - E5 ways to make your integration more resilient by Je...

apidays

Harmony in API Design

Jakub Nesetril

apidays LIVE Australia 2021 - Designing Embedded Platforms by Jeremy Glassenb...

apidays

API Trends: What to expect in 2012

Apigee | Google Cloud

API:World 2016 - Applying Domain Driven Design to APIs and Microservices

LaunchAny

Enterprise apps using ruby droid con berlin 2012

Droidcon Berlin

Extensible API Management

WSO2

API Frenzy: API Strategy 101

Akana

APIdays Zurich 2019 - Boosting the Digital Transformation at UBS with APIs Ro...

apidays

Post-REST Manifesto

Jakub Nesetril

Progress in the API Economy - April 2014

3scale

Essential API Facade Patterns: Session Management (Episode 2)

Apigee | Google Cloud

apidays LIVE Paris - How to build better and consistent APIs at scale by Sami...

apidays

apidays LIVE Australia 2020 - API Design in Fintech: Challenges and Opportuni...

apidays

Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...

CA API Management

apidays LIVE JAKARTA - Productising APIs: A journey in how we built API produ...

apidays

WSO2Con EU 2015: Towards a Winning API Strategy Today, every enterprise agrees that there is a pressing need for business APIs. However, it’s the right API strategy that will make business APIs a winning one. This session will explain how you could formulate a winning API strategy, and will particularly focus on the following areas: What are the key ingredients in defining a winning API strategy? How should the strategy be converted into a set of action items that will create a winning combination? How can WSO2’s API Management capabilities help? It will also touch on some real customer scenarios where WSO2′s platform has been a key part in implementing a winning API strategy for these enterprises. Presenter: Sumedha Rubasinghe Director – API Architecture, WSO2

WSO2Con EU 2015: Towards a Winning API Strategy

WSO2

APIS for Startups - Running your Business Inside Out

3scale

Architecture for the API-enterprise

Apigee | Google Cloud

Mais procurados (20)

Pain Points In API Development? They’re Everywhere

apidays LIVE Jakarta - E5 ways to make your integration more resilient by Je...

Harmony in API Design

apidays LIVE Australia 2021 - Designing Embedded Platforms by Jeremy Glassenb...

API Trends: What to expect in 2012

API:World 2016 - Applying Domain Driven Design to APIs and Microservices

Enterprise apps using ruby droid con berlin 2012

Extensible API Management

API Frenzy: API Strategy 101

APIdays Zurich 2019 - Boosting the Digital Transformation at UBS with APIs Ro...

Post-REST Manifesto

Progress in the API Economy - April 2014

Essential API Facade Patterns: Session Management (Episode 2)

apidays LIVE Paris - How to build better and consistent APIs at scale by Sami...

apidays LIVE Australia 2020 - API Design in Fintech: Challenges and Opportuni...

Building APIs That Last for Decades - Irakli Nadareishvili, Director of API S...

apidays LIVE JAKARTA - Productising APIs: A journey in how we built API produ...

WSO2Con EU 2015: Towards a Winning API Strategy

APIS for Startups - Running your Business Inside Out

Architecture for the API-enterprise

Semelhante a Architecting eCommerce APIs - Gluecon 13

Microservices are a well-established architecture applied by many organizations around the world to build scalable and fault-tolerant backend systems. But as these systems grow so does the number of services in them. And this brings many challenges when we want to introduce new functionality. For a simple feature, engineers may need to spend a lot of time designing the end to end flow, changing code in multiple services and setting up complex test scenarios. During this talk, we’ll explore how to evolve a microservice architecture to be easily extensible based on some lessons learned from running 5000 microservices in production. We’ll go over different architectural patterns and open source tools that we can use to make it easy for all engineers to understand, extend and be more and more productive in such big complex systems.

Evolving big microservice architectures

Nikolay Stoitsev

Creating Datadipity

Clickslide

Secure Enterprise APIs for Mobile, Cloud & Open Web APIs present enterprises with many business opportunities but they also create new attack vectors that hackers can potentially exploit. APIs share many of the same threats that plague the Web but APIs are fundamentally different from Web sites and have an entirely unique risk profile that must be addressed. By adopting a secure API architecture from the beginning, it is possible to address both old and new threats. In this webinar, Scott Morrison – CTO at Layer 7 Technologies – will explain in detail how an enterprise can pursue its API publishing strategy without compromising the security of its on-premise systems and data. You Will Learn How APIs increase the attack surface What key types of risk are introduced by APIs How enterprises can mitigate each of these risks Why it is crucial to separate API implementation and security into distinct tiers Presented By Scott Morrison, CTO, Layer 7 Technologies

Protecting Your APIs Against Attack & Hijack

CA API Management

z/OS Connect - Overview at the "z Systems Agile Enterprise Development Confer...

DevOps for Enterprise Systems

Intro to Azure Api Management - With Cats

Xamariners

Your API is not a Website!

Apigee | Google Cloud

Ibm_interconnect_restapi_workshop

Shubhra Kar

OpenSource Node.js API Framework and Server for Enterprise

Shubhra Kar

Public v1 real world example of azure functions serverless conf london 2016

Yochay Kiriaty

What is an API Gateway?

LunchBadger

Toronto node js_meetup

Shubhra Kar

This presentation runs you through why we decided to create a new architecture and how we managed to rewrite and launch Uber’s Rider app with this new architecture in record time. We’ll talk through the core principles of the new architecture and why we think it’s a perfect fit for creating reliable, highly maintainable mobile applications, especially when you’re working at scale and have a large mobile team.

Uber's new mobile architecture

Dhaval Patel

The Briefing Room with Analyst Dr. Robin Bloor and SOA Live Webcast on May 6, 2014 Watch the archive: Today’s enterprise relies on a host of services and applications to keep business running like a well-oiled machine. The guiding principles behind the service-oriented architecture (SOA) are supposed to ensure a smooth transition between services, but the motley assortment of applications is leaving some organizations over-burdened with complexity and latency. With the increasingly distributed and data-driven information environment, is it time to consider a new approach? Register for this episode of The Briefing Room to learn from veteran Analyst Dr. Robin Bloor as he explains the hopes and dreams of SOA, and why they were never fully achieved. He’ll be briefed by Jason Bloomberg of EnterpriseWeb who will tout his company’s multi-faceted platform, a solution designed to drive agile and flexible business operations and applications. He will demonstrate how EnterpriseWeb circumvents the limitations of SOA and delivers a data-centric environment that dynamically responds to change in real time. Visit InsideAnlaysis.com for more information.

Dynamic APIs: SOA Done Right

Inside Analysis

Startups without Servers

Amazon Web Services

Multitenancy is a software architecture pattern in which a single instance of software serves multiple groups of users (known as tenants or organizations). Many modern SaaS applications use this pattern to serve their customers with maximum efficiency while maintaining operational costs low. But how do you build a multitenant application right? How do you secure one tenant's information from another tenant's users? How do you keep operational costs low? How do you monitor and manage this stuff? In this session you will gain architecture practices for architecting multitenant SaaS applications, learnt from migrating real applications to the cloud so that you won't have to learn them the hard way, with implementation tips and tricks on Azure.

Architecting Multitenant SaaS Applications with Azure - Microsoft Ignite The ...

Eran Stiller

Gli anni 90 furono dirompenti per i tradizionali modelli di business con la corsa per una presenza sul web, oggi, le interfacce di programmazione (API) rappresentano il nuovo must-have per le aziende nei confronti dei clienti e delle community. Cosa è cambiato? Social Network, Social Commerce, Social Content e gli apostoli Facebook, Twitter, Amazon e eBay, ci guidano alla cultura generazionale del “semplice”: Applicazioni utente intelligenti e mirate veicolate da Apple, Android ed i diversi Store. I dispositivi mobili sono la nostra nuova appendice e le applicazioni sono la moneta di scambio

Benvenuti nella “API Economy”

Codemotion

Mobile Security Framework (MobSF) is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static and dynamic analysis. It can be used for effective and fast security analysis of Android and iOS Applications and supports both binaries (APK & IPA) and zipped source code. MobSF can also perform Web API Security testing with it's API Fuzzer that can do Information Gathering, analyze Security Headers, identify Mobile API specific vulnerabilities like XXE, SSRF, Path Traversal, IDOR, and other logical issues related to Session and API Rate Limiting.

Nullcon Goa 2016 - Automated Mobile Application Security Testing with Mobile ...

Ajin Abraham

Build Omni-channel APIs in minutes with Node.js. StrongLoop's Loopback API server provides an open source API framework for connecting mobile, devices, sensors and web to backends though lightweight APIs. Get Mobile Backend as a Service (mBaaS) and API Gateway plus a Visual API editor (Studio) all in a single modular Node.js platform. SDKs for Angular, iOS, Android and JavaScript makes Isomorphic JavaScript and fullstack JS a reality.

Triangle Node Meetup : APIs in Minutes with Node.js

Shubhra Kar

Understanding API Architectures: Web API vs. Minimal API – An In-Depth Compar...

Polyxer Systems

Web APIs have now become as important as websites for some enterprises. Dreaming up an attractive set of data resources to expose to your consumers is a critical step, but it's just the beginning. In the world of APIs, standards are rare, so common conventions are everything. Which should you choose, and how do you apply them to your data model? What architecture will ensure your APIs are robust, scalable, and secure? How do you ensure data integrity in an environment without transactionality? How will you prepare for huge changes in scale? How do you join your API world with your existing enterprise integration and SOA? Attendees will learn design practices to ensure their APIs are both attractive and consumable.

What’s behind a high quality web API? Ensure your APIs are more than just a ...

Kim Clark

Semelhante a Architecting eCommerce APIs - Gluecon 13 (20)

Evolving big microservice architectures

Creating Datadipity

Protecting Your APIs Against Attack & Hijack

z/OS Connect - Overview at the "z Systems Agile Enterprise Development Confer...

Intro to Azure Api Management - With Cats

Your API is not a Website!

Ibm_interconnect_restapi_workshop

OpenSource Node.js API Framework and Server for Enterprise

Public v1 real world example of azure functions serverless conf london 2016

What is an API Gateway?

Toronto node js_meetup

Uber's new mobile architecture

Dynamic APIs: SOA Done Right

Startups without Servers

Architecting Multitenant SaaS Applications with Azure - Microsoft Ignite The ...

Benvenuti nella “API Economy”

Nullcon Goa 2016 - Automated Mobile Application Security Testing with Mobile ...

Triangle Node Meetup : APIs in Minutes with Node.js

Understanding API Architectures: Web API vs. Minimal API – An In-Depth Compar...

What’s behind a high quality web API? Ensure your APIs are more than just a ...

Último

The presentation explores the development and application of artificial intelligence (AI) from its inception to its current status in the modern world. The term "artificial intelligence" was first coined by John McCarthy in 1956 to describe efforts to develop computer programs capable of performing tasks that typically require human intelligence. This concept was first introduced at a conference held at Dartmouth College, where programs demonstrated capabilities such as playing chess, proving theorems, and interpreting texts. In the early stages, Alan Turing contributed to the field by defining intelligence as the ability of a being to respond to certain questions intelligently, proposing what is now known as the Turing Test to evaluate the presence of intelligent behavior in machines. As the decades progressed, AI evolved significantly. The 1980s focused on machine learning, teaching computers to learn from data, leading to the development of models that could improve their performance based on their experiences. The 1990s and 2000s saw further advances in algorithms and computational power, which allowed for more sophisticated data analysis techniques, including data mining. By the 2010s, the proliferation of big data and the refinement of deep learning techniques enabled AI to become mainstream. Notable milestones included the success of Google's AlphaGo and advancements in autonomous vehicles by companies like Tesla and Waymo. A major theme of the presentation is the application of generative AI, which has been used for tasks such as natural language text generation, translation, and question answering. Generative AI uses large datasets to train models that can then produce new, coherent pieces of text or other media. The presentation also discusses the ethical implications and the need for regulation in AI, highlighting issues such as privacy, bias, and the potential for misuse. These concerns have prompted calls for comprehensive regulations to ensure the safe and equitable use of AI technologies. Artificial intelligence has also played a significant role in healthcare, particularly highlighted during the COVID-19 pandemic, where it was used in drug discovery, vaccine development, and analyzing the spread of the virus. The capabilities of AI in healthcare are vast, ranging from medical diagnostics to personalized medicine, demonstrating the technology's potential to revolutionize fields beyond just technical or consumer applications. In conclusion, AI continues to be a rapidly evolving field with significant implications for various aspects of society. The development from theoretical concepts to real-world applications illustrates both the potential benefits and the challenges that come with integrating advanced technologies into everyday life. The ongoing discussion about AI ethics and regulation underscores the importance of managing these technologies responsibly to maximize their their benefits while minimizing potential harms.

Artificial Intelligence: Facts and Myths

Joaquim Jorge

In this session, we will delve into strategic approaches for optimizing knowledge management within Microsoft 365, amidst the evolving landscape of Copilot. From leveraging automatic metadata classification and permission governance with SharePoint Premium, to unlocking Viva Engage for the cultivation of knowledge and communities, you will gain actionable insights to bolster your organization's knowledge-sharing initiatives. In this session, we will also explore how to facilitate solutions to enable your employees to find answers and expertise within Microsoft 365. You will leave equipped with practical techniques and a deeper understanding of how there is more to effective knowledge management than just enabling Copilot, but building actual solutions to prepare the knowledge that Copilot and your employees can use.

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Drew Madelung

A Domino Admins Adventures (Engage 2024)

Gabriella Davis

What are drone anti-jamming systems? The drone anti-jamming systems and anti-spoof technology protect against interference, jamming, and spoofing of the UAVs. To protect their security, countries are beginning to research drone anti-jamming systems, also known as drone strike weapons. The anti-jam and anti-spoof technology protects against interference, jamming and spoofing. A drone strike weapon is a drone attack weapon that can attack and destroy enemy drones. So what is so unique about this amazing system?

What Are The Drone Anti-jamming Systems Technology?

Antenna Manufacturer Coco

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Rafal Los

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

AWS Community Day CPH - Three problems of Terraform

Andrey Devyatkin

Discord is a free app offering voice, video, and text chat functionalities, primarily catering to the gaming community. It serves as a hub for users to create and join servers tailored to their interests. Discord’s ecosystem comprises servers, each functioning as a distinct online community with its own channels dedicated to specific topics or activities. Users can engage in text-based discussions, voice calls, or video chats within these channels. Understanding Discord Servers Discord servers are virtual spaces where users congregate to interact, share content, and build communities. Servers may revolve around gaming, hobbies, interests, or fandoms, providing a platform for like-minded individuals to connect. Communication Features Discord offers a range of communication tools, including text channels for messaging, voice channels for real-time audio conversations, and video channels for face-to-face interactions. These features facilitate seamless communication and collaboration. What Does NSFW Mean? The acronym NSFW stands for “Not Safe For Work,” indicating content that may be inappropriate for professional or public settings. NSFW Content NSFW content encompasses material that is sexually explicit, violent, or otherwise graphic in nature. It often includes nudity, profanity, or depictions of sensitive topics.

Understanding Discord NSFW Servers A Guide for Responsible Users.pdf

UK Journal

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

With more memory available, system performance of three Dell devices increased, which can translate to a better user experience Conclusion When your system has plenty of RAM to meet your needs, you can efficiently access the applications and data you need to finish projects and to-do lists without sacrificing time and focus. Our test results show that with more memory available, three Dell PCs delivered better performance and took less time to complete the Procyon Office Productivity benchmark. These advantages translate to users being able to complete workflows more quickly and multitask more easily. Whether you need the mobility of the Latitude 5440, the creative capabilities of the Precision 3470, or the high performance of the OptiPlex Tower Plus 7010, configuring your system with more RAM can help keep processes running smoothly, enabling you to do more without compromising performance.

Boost PC performance: How more available memory can improve productivity

Principled Technologies

Building Digital Trust in a Digital Economy Veronica Tan, Director - Cyber Security Agency of Singapore Apidays Singapore 2024: Connecting Customers, Business and Technology (April 17 & 18, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

apidays

Handwritten Text Recognition for manuscripts and early printed texts

Maria Levchenko

Developing An App To Navigate The Roads of Brazil

V3cube

Abhishek Deb(1), Mr Abdul Kalam(2) M. Des (UX) , School of Design, DIT University , Dehradun. This paper explores the future potential of AI-enabled smartphone processors, aiming to investigate the advancements, capabilities, and implications of integrating artificial intelligence (AI) into smartphone technology. The research study goals consist of evaluating the development of AI in mobile phone processors, analyzing the existing state as well as abilities of AI-enabled cpus determining future patterns as well as chances together with reviewing obstacles as well as factors to consider for more growth.

Exploring the Future Potential of AI-Enabled Smartphone Processors

debabhi2

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Neo4j

🐬 The future of MySQL is Postgres 🐘

RTylerCroy

Scaling API-first – The story of a global engineering organization Ian Reasor, Senior Computer Scientist - Adobe Radu Cotescu, Senior Computer Scientist - Adobe Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

apidays

Strategies for Landing an Oracle DBA Job as a Fresher

Remote DBA Services

Finology Group – Insurtech Innovation Award 2024

The Digital Insurer

Architecting eCommerce APIs - Gluecon 13

1. Architecting e-Commerce APIs Saranyan Vigraham @saranyan, Tech Guy, Bigcommerce)

2. What is BAD software design?

3. Rigid - Hard to Change Too many parts get affected by a change

4. Fragile - Unexpected things Something else breaks

5. No re-usability It is part of the “core code”

6. Mobile, Blah Blah!

7. Importance of Platform

8. Where is your API?

9. We are forced to rethink our architectures Website and Mobile Templates Database MVC Mobile Templates MVC Templates Database Static Assets Mobi MVC Mobile Templates Static Assets Templates Database MVC Static Assets

10. Website Templates MVC Static Assets Mobile Templates MVC Static Assets Native App Native App API Database

11. The Big Ball of Mud Brian Foote and Joseph Yoder, laputan.org/mud

12. The Big Ball of Mud

13. Starting with API ﬁrst

14. Everything is a service! UI UI API Layer UI

15. Everything is a service! API Layer Payments Orders ... Authentication

16. Everything is a service! API Layer Payments Orders Service Container Single Code Base ... Authentication

17. Everything is a service! API Layer Payments Orders Service Container X Single Code Base ... Authentication

18. Everything is a service! API Layer Single Code Base Payments Orders Service Container ... Authentication

19. Liskov Substitution Client Service 1 Service 2 Service 3

20. Liskov Substitution Client Service 1 Service 2 Service 3

21. Liskov Substitution API Layer Single Code Base Payments Shipping ... Authentication Service Container New Authentication System Shipping Service 2.0 New Service Container

22. Interface Segregation Single Code Base API Layer Payments Orders Service Container ... Authentication

23. Interface Segregation Single Code Base UI UI API Layer Payments Orders Service Container ... Authentication

24. Interface Segregation API Layer Payments Orders Service Container Single Code Base ... Authentication

25. Interface Segregation Single Code Base UI UI API Layer Payments Orders Service Container ... Authentication

26. Re-cap • Everything is a service • Single codebase - Creation of sandboxes, provisioning, etc • Liskov substitution • Interface Segregation

27. ? @saranyan https://developer.bigcommerce.com

Architecting eCommerce APIs - Gluecon 13

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a Architecting eCommerce APIs - Gluecon 13

Semelhante a Architecting eCommerce APIs - Gluecon 13 (20)

Último

Último (20)

Architecting eCommerce APIs - Gluecon 13