api key management for a distributed api

12
1 CONFIDENTIAL Andrew Winder Senior Software Engineer, Message Systems Key Management for a Distributed API 10/27/22

Upload: andrew-winder

Post on 25-Jan-2015

243 views

Category:

Technology


3 download

DESCRIPTION

Building software in distributed components has a lot of benefits. It's easier to maintain and refactor, theres a clean separation of concerns, and it's easier to split into multiple teams to get work done. But how do you manage common tasks like Authentication sanely in such an architecture? We built an API Gateway in Nginx that starts to solve some of these issues.

TRANSCRIPT

Page 1: API Key Management for a Distributed API

1

CONFIDENTIAL

Andrew WinderSenior Software Engineer, Message Systems

Key Management for a Distributed API

April 10, 2023

Page 2: API Key Management for a Distributed API

2

Who Is Message Systems?

Page 3: API Key Management for a Distributed API

3

How do we develop products?

• API-centric architecture• Resource-oriented APIs, future plans for Hypermedia• Web UIs are JavaScript apps talking to APIs• Modular APIs and codebases

Page 4: API Key Management for a Distributed API

4

Challenges with that approach?

Page 5: API Key Management for a Distributed API

5

Challenges

Page 6: API Key Management for a Distributed API

6

Solution, from 10K feet

Page 7: API Key Management for a Distributed API

7

Pre-Built Solutions

Page 8: API Key Management for a Distributed API

8

Nginx for CORS

Page 9: API Key Management for a Distributed API

9

Nginx for Auth

Page 10: API Key Management for a Distributed API

10

Benefits of this approach

Page 11: API Key Management for a Distributed API

11

Page 12: API Key Management for a Distributed API

12

Demo & Questions

Twitter: @[email protected]