Crafting APIs for Mobile Apps - Everything You Need to Know

Preview:

Citation preview

Crafting APIs for Mobile Apps

@apigee

Ed Anuff@edanuff

Marsh Gardiner@earth2marsh

youtube.com/apigee

slideshare.net/apigee

j.mp/api-craft j.mp/app-craft

Apigee powers Walgreens, Best Buy, Gilt Groupe, NewEgg, Cars.com, Dell, GraceNote, Shazam, HomeAway, Pearson, cheezburger, eBay…

Almost all of those are Mobile Apps that connect to the cloud with APIs

2000 Today

SmartPhone

PartnerIntegration

MobileDevice

Connected Car

Internet TV Innovation

DVR

Web App

Gaming Console

Website

Tablet

Your Company

2006

The App Economy

Mobile == APIs?

Just about…

100x Devices To Servers

Internet of Everything?Internet of APIs

Websites Apps

MultipleDevices

Companies

ConsumerApps & Developers

1.5M Apps150 Times a day2B Smartphones

300B API calls a day?

Some Quick Math…

Quite Possibly

PersonalizationContentSocialTransactionsAnalytics

Push NotificationsGeolocationIdentity ManagementFile StoragePicture SharingSocial NetworkingSecurity

Requirements of all modern app development

User Management Datastore

Location

Messaging

Social Graph

Analytics

Activity Streams

Sign-inUploadPhoto

CalculateCost

PlaceOrder

/photos /coupons /orders/token

Example: Mobile Conference AppSign In To

The Conferenc

e

/token

See What Colleagues Are Here

/users/me/friends

What sessions should I attend?

/sessions

Example: Mobile Conference AppRSVP to

sessionsAsk

Questions

/users/me/sessions

Check-in at

a Session

/users/me/activities /sessions/23/questions

What’s different?

ArchitectureClient DevelopmentSecurity ModelsAsync & DisconnectedDebugging

Architecture

2-Tier (and 2 Teams)Web is a clientMore logic on deviceNew Stacks (Node.js)Backend-as-a-Service

ServerInfrastructure

AppCode

SDK API

Client Development

SDK or API?Static Obj-C and JavaHTML5/JS (PhoneGap)Async (& background)

Security

Identity (FB, OAuth) Untrusted DeviceToken VendingPolicies & PermissionsUntrusted NetworkMITM

Async & Offline

NotificationsPush, Poll, WebSocketNetwork AvailabilityIntermittent & OfflineMessage Queues SQS, etc.Latency

Debugging

Where To Start?App, Network, ServerTimeoutsMissing HeadersAuth & SecurityLog EVERYTHING

Summary

Apps & APIs

2 sides of same coin

Key App Features Cloud ConnectedNew Architecture Client/Server ReduxNew Development SDKs, Async, Offline

Questions?

Ed Anuff@edanuff

Marsh Gardiner@earth2marsh

Thanks!

youtube.com/apigee

slideshare.net/apigee

linkedin.com/company/apigee

Recommended