All DreamFactory APIs are private by default, requiring at a minimum an API key for authentication purposes. The API key is associated with role-based access control (RBAC) which determines what actions the client responsible for supplying the API key can undertake with regards to the API. OAuth 2.0 makes adding an authentication system to your app or web page considerably easy. Many different service providers support the OAuth 2.0 spec and, in turn, so does DreamFactory.

With web applications and public APIs becoming increasingly important to how organizations interface with their customers and partners, many are turning to dedicated tools that can help protect these assets.

This tutorial shows you how to create a custom Kong Gateway plugin with Go programming language. The sample plugin I created adds an extra layer for security between consumers and producers. The way it works is it identifies consumers through a consumer-key from a query string. Without this parameter, they’ll get an error message.

The more services you have running across different clouds and Kubernetes clusters, the harder it is to ensure that you have a central place to collect service mesh observability metrics. That’s one of the reasons we created Kuma, an open source control plane for service mesh. In this tutorial, I’ll show you how to set up and leverage the Traffic Metrics and Traffic Trace policies that Kuma provides out of the box. If you haven’t already, install Kuma and connect a service.

The application programming interface (API) is a piece of middleware technology that helps programs talk to each other and improves business workflows. Previous schools of thought categorized APIs as a tool to be kept within the business however recent innovations with APIs show the technology is capable of doing so much more. Thanks to API innovations and evangelists, we’re now on the verge of a new API golden age where businesses rise and fall by the strength of their integrations.

Whether you’re adding to your app ecosystem or working on a full digital transformation business strategy, your aim is a smooth enterprise integration process. But when you’re working with multiple programming languages, brands, or operating systems, it can get complicated quickly. API integration is now critical to business functionality in an increasingly technical world. It’s the best way to avoid compatibility issues with all your apps and opens the door for future implementations.