Creating and managing APIs with API Connect - IBM€¦ · •12:15 Creating and managing APIs with API Connect •13:15 LUNCH •14:00 Securing APIs from End-to-End •15:00 Architecture

1 © 2015 IBM Corporation© 2017 IBM Corporation

Z

Creating and managing APIs with API Connectz API Roadshow

Eric Phanz Systems IT [email protected]

2 ©2016IBMCorporation2 © 2017 IBM Corporation

Agenda• 09:30Registration&Coffee• 10:00Welcome&TrendsintheAPIEconomy:theBusinessOpportunity• 10:30CreatingAPIsfrommainframeapplicationswithz/OSConnect• 11:30BREAK• 12:15CreatingandmanagingAPIswithAPIConnect• 13:15LUNCH• 14:00SecuringAPIsfromEnd-to-End• 15:00ArchitectureOptionsforAPIEnablingzSystems• 15:45 IBMEngagementOfferings&ClosingComments• 15:00CLOSE


Session Agenda• SoE exampleAppconsumingAPIs

• APIConnect:Overview

• Demonstration– ManageAPIs

• InteractionAPI

• Summary

4 ©2016IBMCorporation4 © 2017 IBM Corporation4 ©2016IBMCorporation4 © 2017 IBM Corporation

z/OS

CICS

z/OSConnectEEV2.0

https/json

GET/items?startItemIDGET/items/{itemID}POST/orders

Services

API

inquireCataloginquireSingleplaceOrder

GET /items?startItemID=<value>

GET /items/{itemID}

POST /orders + (JSONwithitemreferenceandquantity)

HTTPVerbconveysthemethodagainsttheresources;i.e.,POSTisforcreateorder,GETisforretrievinginformationabout

itemsinthecatalog

URIconveystheresourcetobeactedupon;i.e.,

itemreference

TheJSONbodycarriesthespecificdatafortheaction(verb)againsttheresource

(URI)

InquireItem

PlaceOrder

DFH0XCMN

InquireCatalog

VSAM

SampleAPIresponse

CatalogManagerAPIwithCICS


CICS

MobileApp

zSystems

OverallArchitecture– PhoneBookMobileApp

API Gateway

Interaction API

-𝜇Service

App

z/OS

GoogleMaps


On-premise

OpenAPI(swagger2.0)SecureGateway

z/OSCo

nnect

APITraffic

SoE exampleAppconsumingAPIs

API

Con

nect

Bluemix


APIEconomyValueChain

Existing Enterprise IT Investments

Exposed as APIs

Self Service Consumed by

Developers

To Develop Innovative Apps

Delivering Differentiated

B2C, B2B, B2E Experiences

Consumer Provider

{}


APIEconomyActors

API Developer• How do I create APIs?• How do I manage security?• How do I test my APIs?

App Developer• Where do I access APIs?• How do I understand the APIs?• How do I measure success?

API Product Manager• How can I rapidly release & update my APIs?• How do I publicize my API?• How do I measure success?


APIEconomyValueChain

Existing Enterprise IT Investments

Exposed as APIs

Self Service Consumed by

Developers

To Develop Innovative Apps

Delivering Differentiated

B2C, B2B, B2E Experiences

Consumer Provider

{}

App Developer

APIProduct Mgr

APIDeveloper


What is API Connect?An integrated creation, runtime, management, and security foundation for enterprise grade API’s and Microservices to power modern digital applications

What does API Connect provide?• Automated, visual and coding options for creating APIs• Node.js and Java support for creating Microservices• Integrated enterprise grade clustering, management and security for

Node.js and Java• Lifecycle and governance for APIs, Products and Plans• Access control over API’s, API Plans and API Products• Advanced API usage analytics • Customizable, self service developer portal for publishing APIs • Policy enforcement, security and control

Create Run

ManageSecure

Simplified&ComprehensiveAPIfoundation


API ManagerDeveloper Portal DeveloperToolkit

API Gateway Interaction API𝞵 Service

App Developer

Create&Run(Node/JAVA)

WheredoesAPIConnectfit?

z System / Legacy Apps

Cloud Service

Application Server

ESB / Middleware

Data Store

Provider (Systems of Record)

Consumer (Systems of Engagement)

• Checks(security/message)• Transformation• TrafficControl• Monitoring- Analytics

Manage

Secure

Deployment Options:

Bluemix Public, Bluemix Dedicated

On Premise or Customer Cloud


System APIs:APIs that pass through data from a system of record unchanged

Interaction APIs:Invoke one or more System API’s or data sources, and manipulate the returned data with new logic

Promote reuse across new applications

App

ESB

System API

WebService

System API

TH GSINwww

Interaction API

System&InteractionAPIs


API Gateway Description RecommendationMicro Gateway Node.js in Liberty

CollectiveInternal consumption of APICollocation with runtimesInherit of platform cryptographyaccelerations

IBM DataPower Gateway –Virtual Appliance

Virtual image running on a hypervisor

Enterprise API gateway

IBM DataPower Gateway –Physical Appliance

Physical box API for consumption by external (e.g. mobile, web, IoT, 3rd party) or business partner apps in the DMZ

APIGatewaychoices


MicroGateway

APIGatewayPolicies

DataPower

Samelogic functions

Differentpoliciesfunctions


API Connect Essentials (Free) Professional EnterpriseBuilt For Developer Department;

Single projectDepartments &

Cross-enterpriseGateways included

MicroGateway MicroGatewayDataPower Virtual

MicroGatewayUpgrades available DataPower Virtual

DataPower PhysicalDataPower Virtual

DataPower Physical DataPower Physical

• All editions of API Connect provide integration with DataPower as the API Gateway• API Connect Enterprise includes DataPower Gateway Virtual Edition to provide comprehensive

API Gateway security, traffic management, mediation & optimization functionality for enterprise deployments

• Is the upgrade path for existing IBM API Management v4 clients• API Connect Essentials and Professional are powered by a programmable MicroGateway that

empowers developers and supports single departmental/small projects starting their API journey• Option to utilize DataPower Gateway to meet advanced, enterprise-grade API Gateway

needs

APIConnectofferings


IMS

CICS

Systems of RecordSystems of Engagement

Management +

Runtime gateway enforcement

• Discover z/OS Connect REST APIs• Secure access to z/OS Connect REST APIs • Provide self-service & social experience to API consumers on a built-in developer portal• Enforce runtime rate limits, and throttle impact to z/OS systems• Manage API subscribers with API lifecycle & Analyze API usage

Developer portal API analytics

Serviceson

Serviceson

APIConnectwithz/OSConnect


Demonstration-

Manage APIs


z/OSConnectresponse APIConnectresponse

ChangeJSONobjectnamesinrequestmessage

ChangeJSONstructureofresponsemessage

ModifyAPIinterface(Part1of2)The Assemble Flow allows us to modify the API interface. For example the JSON structureand names of JSON objects can be changed in JSON request and response messages.

APIConnectrequest z/OSConnectrequest


ModifyAPIinterface(Part2of2)

1

If“Order” operationthenMapJSON;otherwiseproceedtonextstep.

2

Sendmodifiedrequesttoz/OSConnectEEAPI

3

ChangeJSONstructure ofresponsemessage


APIGateway:Assemblyflow

workflow

IncomingHTTPrequest

OutgoingHTTPresponse

ActionsTransforms inputwith thespecified action

Conditional processing(forspecific operation,path,inputvalues,etc.)

Proxy/Invoke actionsSends anHTTPrequest withtheinputandgives theHTTPresponse asoutput


API ManagerDeveloper Portal

API Gateway

CreateAssembleFlowandPublish

1

2

RetrieveAPISwaggerdefinition

3

[Publish]ConfigureAPIGateway

4

[Publish]Make APIavailable

zCEE APIs

FromtheAPIManageranexistingAPIcanbediscovered,securedandmanaged.

CICS

App Developer

Steps:ManageanexistingSystemAPI


SecureandmanageAPIThe API is designed with parameters at the API level and at the Product level.

APIDesignview

ProductDesignview


Interaction APIs


InteractionAPI

{"ca_cost":"002.90","in_stock":91,"ca_description":"BallPens Black24pk","on_order":0,"ca_department":10,"ca_item_ref":20}

{"ca_cost":"002.90","in_stock":91,"ca_description":"BallPens Black24pk","on_order":0,"ca_department":10,"ca_item_ref":20,"image":"iVB0Rw0KGgoAAA…"}

{"reference":"20","image":"iVB0Rw0KGgoAAA…","id":"561cf1fa50c9085fb3…",}

Interaction API aggregates information from different System APIs


LoopBack App

Components

Typesofconnectors

Models• Codetohandlerequests• DatastructureDatasources• Configurationtoaccess

datasourcesConnectors• Communicationwithdata

sources


API Management Node

Collective Controller

Collective MemberNode.js

Web Router Interaction API

LibertyCollectiveLinuxonz

RESTConnectorz/OSConnectEEConnector

Cloudant Connector

CICS

Developer Toolkit

CreateaLoopBack appWritespecificcode

1

2

TestInteractionAPI

3

Deploy InteractionAPI

Steps:CreateanInteractionAPI


API ManagerDeveloper Portal

API Gateway

CreateAssembleFlowandPublish

1

2

[Publish]ConfigureAPIGateway

3

[Publish]Make APIavailable

App Developer

Steps:ManageanInteractionAPI

Developer Toolkit

CICS

Interaction API


Summary

API ManagerDeveloper Portal DeveloperToolkit

API Gateway Interaction API

CICS

App Developer

Create&Test

RunSecure

Publicize&ControlAccess

Manage&Configure


ForresterWave:APIManagementSolutions,Q42016


Moreinformation

IBMAPIConnect— http://www.ibm.com/software/products/en/api-connect

— http://www.ibm.com/support/knowledgecenter/SSMNED

— https://developer.ibm.com/apiconnect

IBMAPIConnectDevCenter

IBMAPIConnectKnowledgeCenter


Moreinformation– APIConnectVideo


Thank you!

Any Questions?

Documents

Creating and managing APIs with API Connect - IBM€¦ · •12:15 Creating and managing APIs with API Connect •13:15 LUNCH •14:00 Securing APIs from End-to-End •15:00 Architecture