Welcome!

Java IoT Authors: Liz McMillan, Pat Romanski, Elizabeth White, Yeshim Deniz, Frank Lupo

Related Topics: @CloudExpo, Java IoT, Agile Computing

@CloudExpo: Blog Post

Secrets of the Usable REST API By @JKRiggins | @CloudExpo #API #Cloud

First and foremost, developer experience matters

Secrets of the Usable REST API
by Jennifer Riggins

Teowaki founder Javier Ramirez kicked off his Future of Web Apps presentation with a striking headline from a local town newspaper:

"I've been posting my letters in the dog poo box for two years."

In an effort to class up the North Yorkshire town (or perhaps to save on supplies), the town had painted dog waste bins the same elegant red of the public mailboxes.

"Everybody agrees web usability is a good investment." Ramirez said, but "When I use an API, usability is not that cool," he said, then running through the tedious process to get information via the Amazon API. "Ten simple steps," he said, tongue in cheek.

How can we compare this poo faux pas to Amazon, you ask?
First and foremost, developer experience matters. And as your developer customer evolves, so must the way you develop an API for them. That, and when your API evolves, make it clear to everyone involved - by proper municipal signage or documentation - whichever the situation calls for.

And thus began Ramirez's talk on "Writing Usable REST APIs."

I would argue that his advice could be applied to all forms of the application programming interface or perhaps all apps and websites in general. After all, usability is in the eye of the developer.

Remember, "If a developer doesn't use your API, they won't tell you what they don't like."

What is API usability?
Let's first start with the more common definition. Gary B. Shelly wrote:

"Web usability is an approach to make websites easy to use for an end user, without the requirement that any special training be undertaken."

Jakob Nielsen in his Usability 101 elaborated the five quality components of usability:

  • Learnability: In order for people to use your product, it has to be easy to learn how to use it.
  • Efficient: Once I learn it, I want to use it efficiency. I don't want to go through the tutorial every time.
  • Memorability: It has to be easy to remember how it was, you don't have to learn every time.
  • Errors: Give sensible error messages.
  • Satisfaction: Always a priority in usability.

Ramirez argues that, by applying these five principles, you can also bring about API usability.

How do you know if your API is usable?
Some might say usability testing has no place in the API world. I'm inclined to disagree, but until that's a trend, certainly dogfooding your API should be a no-brainer - if you don't want to use it, who will?

We like to cite Amazon Web Services as the original dogfooder, but we really should give kudos to Mike Scott, then president of Apple who banned the Macintosh's main competitor - the typewriter - from the premise back in 1980.

Within two years, typewriters were essentially obsolete as a company was built upon dogfooding.

Different nerds; different needs
This is Ramirez's way of saying my dad's favorite: "You know what happens when you assume..." You can't just stop at dogfooding because you can never assume anyone is going to use your API in the same way.

"As my girlfriend tells me time and again: ‘Javi, you are not an example of anything'."

Similarly, don't assume that everyone knows the same as you, the developers that built this API. Ramirez suggests that when you are making a REST API available to the masses, the easiest thing is to put everything you can into the query stream, which he says is quite good when people are learning, but afterwards, they can hide it in the headers.

And don't be an over-sharer. He reminded us not to expose your implementations details, focusing on resources not whole database tables.

Don't reinvent the API
"As of today, you don't need to implement your own authentication." In fact, Ramirez said, "don't implement something new, don't try to be too smart" at all. "If something is already available, someone has already been thinking about it for a long time."

Similarly, he argues, whenever possible, just use the standards that are available. "If you don't like a standard too much, that's too bad."

Your API is your best way of communicating with developers
Perhaps even more important than Nielsen's five, is the Ramirez one: Consistency.

"If your API behaves consistently all the time," he says you have nothing to worry about. Follow common API call patterns and, likewise, follow common fail patterns. You have to return the same error every time in order to fail consistently too.

"Just choose the code that makes sense for your application and keep it consistent," he continued.

Ramirez later offered the example of a Twitter quota where it's clear in the metadata of how many API calls you have made and can make but, for many APIs, it's not that clear at all.

But communication isn't just about writing clear code. It's about proper API documentation. In Zappos' case, they've written right into their API's error message that "If you're reading this, maybe you should be working at Zappos instead. Check out jobs.zappos.com."

Zappos Example

Go as fast as you can... when you can
"If your API is slow and someone has to call your API and wait 30 seconds to get a response, they aren't going to use you."

Ramirez went on to admit that sometimes you just can't be fast, but then you can at least be asynchronous, "But don't make developers wait for your API."

Sometimes, speed comes by not having a clunky API. Netflix started out with what Ramirez calls its OSFA or One Size Fits All API, but they found they could be more agile by providing a series of REST APIs.

"What they did is that they move away from that system to what they call an experience[-based] API" Depending on device, different experience, "and I'm going to give you a different API adapted for that experience."

When you're having two billion requests to your API per day, it really helps to do different requests for different devices. This led to a better developer experience, a better user experience, and it cut a huge amount of expenses by saving bandwidth.

Is Hypermedia the secret to the Usable REST API?
Ramirez doesn't offer any secret formula but he offers certain ways he believes you can more easily deliver a better developer experience.

First and foremost, he believes hypermedia makes for more navigable APIs through the Hypermedia Application Language Standard or HAL, allowing you to embed several resources in a single request.

To some extent, "if there is an alignment of the planet and the sun, you can do versioning without versions," and you can create a link to give me information for a new object. "By doing those things and also using hypermedia, you can do great things," Ramirez assured.

And fitting nicely with hypermedia APIs, he also recommended you just go and build your API with JSON, as he is among many that believe this will eventually be the standard.

Of course, a good developer experience comes with great API documentation, which he said should include:

  • code examples
  • philosophy
  • resources
  • where you do

Ramirez went on to suggest you use Swagger to write your API documentation, as well as allowing you to "play with your API without writing any code."

Don't forget
Ramirez said two things that are most important in order to balance your business with your developer experience:

  • Model your API around your business not around your internal architecture, which comes with benefits like moving to another version without breaking your API.
  • And always remind your team: "I don't care about companies; I care about people doing things."

When you are looking to build a usable REST API or any amazing developer experience, you need to ask yourself these questions and more:

  • Should my API allow asynchronous creation, update, and deletion?
  • Should my API ignore unrecognized parameters silently, even when it is getting a valid request, or should it return and error?
  • Should it allow bulk operations?
  • Does API need real-time?

"There are not good or bad answers. Every API is different. Every user base is different. The only wrong answer is copying and pasting from the last project," Ramirez said.

Most importantly, you must always ask yourself: Would I want to use it?

Read the original blog entry...

More Stories By SmartBear Blog

As the leader in software quality tools for the connected world, SmartBear supports more than two million software professionals and over 25,000 organizations in 90 countries that use its products to build and deliver the world’s greatest applications. With today’s applications deploying on mobile, Web, desktop, Internet of Things (IoT) or even embedded computing platforms, the connected nature of these applications through public and private APIs presents a unique set of challenges for developers, testers and operations teams. SmartBear's software quality tools assist with code review, functional and load testing, API readiness as well as performance monitoring of these modern applications.

@ThingsExpo Stories
In a recent survey, Sumo Logic surveyed 1,500 customers who employ cloud services such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). According to the survey, a quarter of the respondents have already deployed Docker containers and nearly as many (23 percent) are employing the AWS Lambda serverless computing framework. It’s clear: serverless is here to stay. The adoption does come with some needed changes, within both application development and operations. Tha...
In his Opening Keynote at 21st Cloud Expo, John Considine, General Manager of IBM Cloud Infrastructure, will lead you through the exciting evolution of the cloud. He'll look at this major disruption from the perspective of technology, business models, and what this means for enterprises of all sizes. John Considine is General Manager of Cloud Infrastructure Services at IBM. In that role he is responsible for leading IBM’s public cloud infrastructure including strategy, development, and offering ...
As hybrid cloud becomes the de-facto standard mode of operation for most enterprises, new challenges arise on how to efficiently and economically share data across environments. In his session at 21st Cloud Expo, Dr. Allon Cohen, VP of Product at Elastifile, will explore new techniques and best practices that help enterprise IT benefit from the advantages of hybrid cloud environments by enabling data availability for both legacy enterprise and cloud-native mission critical applications. By rev...
SYS-CON Events announced today that Ryobi Systems will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Ryobi Systems Co., Ltd., as an information service company, specialized in business support for local governments and medical industry. We are challenging to achive the precision farming with AI. For more information, visit http:...
Amazon is pursuing new markets and disrupting industries at an incredible pace. Almost every industry seems to be in its crosshairs. Companies and industries that once thought they were safe are now worried about being “Amazoned.”. The new watch word should be “Be afraid. Be very afraid.” In his session 21st Cloud Expo, Chris Kocher, a co-founder of Grey Heron, will address questions such as: What new areas is Amazon disrupting? How are they doing this? Where are they likely to go? What are th...
High-velocity engineering teams are applying not only continuous delivery processes, but also lessons in experimentation from established leaders like Amazon, Netflix, and Facebook. These companies have made experimentation a foundation for their release processes, allowing them to try out major feature releases and redesigns within smaller groups before making them broadly available. In his session at 21st Cloud Expo, Brian Lucas, Senior Staff Engineer at Optimizely, will discuss how by using...
In this strange new world where more and more power is drawn from business technology, companies are effectively straddling two paths on the road to innovation and transformation into digital enterprises. The first path is the heritage trail – with “legacy” technology forming the background. Here, extant technologies are transformed by core IT teams to provide more API-driven approaches. Legacy systems can restrict companies that are transitioning into digital enterprises. To truly become a lead...
SYS-CON Events announced today that Daiya Industry will exhibit at the Japanese Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Ruby Development Inc. builds new services in short period of time and provides a continuous support of those services based on Ruby on Rails. For more information, please visit https://github.com/RubyDevInc.
As businesses evolve, they need technology that is simple to help them succeed today and flexible enough to help them build for tomorrow. Chrome is fit for the workplace of the future — providing a secure, consistent user experience across a range of devices that can be used anywhere. In her session at 21st Cloud Expo, Vidya Nagarajan, a Senior Product Manager at Google, will take a look at various options as to how ChromeOS can be leveraged to interact with people on the devices, and formats th...
SYS-CON Events announced today that Yuasa System will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Yuasa System is introducing a multi-purpose endurance testing system for flexible displays, OLED devices, flexible substrates, flat cables, and films in smartphones, wearables, automobiles, and healthcare.
SYS-CON Events announced today that Taica will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Taica manufacturers Alpha-GEL brand silicone components and materials, which maintain outstanding performance over a wide temperature range -40C to +200C. For more information, visit http://www.taica.co.jp/english/.
Organizations do not need a Big Data strategy; they need a business strategy that incorporates Big Data. Most organizations lack a road map for using Big Data to optimize key business processes, deliver a differentiated customer experience, or uncover new business opportunities. They do not understand what’s possible with respect to integrating Big Data into the business model.
Recently, REAN Cloud built a digital concierge for a North Carolina hospital that had observed that most patient call button questions were repetitive. In addition, the paper-based process used to measure patient health metrics was laborious, not in real-time and sometimes error-prone. In their session at 21st Cloud Expo, Sean Finnerty, Executive Director, Practice Lead, Health Care & Life Science at REAN Cloud, and Dr. S.P.T. Krishnan, Principal Architect at REAN Cloud, will discuss how they b...
Enterprises have taken advantage of IoT to achieve important revenue and cost advantages. What is less apparent is how incumbent enterprises operating at scale have, following success with IoT, built analytic, operations management and software development capabilities – ranging from autonomous vehicles to manageable robotics installations. They have embraced these capabilities as if they were Silicon Valley startups. As a result, many firms employ new business models that place enormous impor...
SYS-CON Events announced today that Dasher Technologies will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Dasher Technologies, Inc. ® is a premier IT solution provider that delivers expert technical resources along with trusted account executives to architect and deliver complete IT solutions and services to help our clients execute their goals, plans and objectives. Since 1999, we'v...
SYS-CON Events announced today that MIRAI Inc. will exhibit at the Japan External Trade Organization (JETRO) Pavilion at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. MIRAI Inc. are IT consultants from the public sector whose mission is to solve social issues by technology and innovation and to create a meaningful future for people.
SYS-CON Events announced today that TidalScale, a leading provider of systems and services, will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 - Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. TidalScale has been involved in shaping the computing landscape. They've designed, developed and deployed some of the most important and successful systems and services in the history of the computing industry - internet, Ethernet, operating s...
SYS-CON Events announced today that TidalScale will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. TidalScale is the leading provider of Software-Defined Servers that bring flexibility to modern data centers by right-sizing servers on the fly to fit any data set or workload. TidalScale’s award-winning inverse hypervisor technology combines multiple commodity servers (including their ass...
SYS-CON Events announced today that IBM has been named “Diamond Sponsor” of SYS-CON's 21st Cloud Expo, which will take place on October 31 through November 2nd 2017 at the Santa Clara Convention Center in Santa Clara, California.
Infoblox delivers Actionable Network Intelligence to enterprise, government, and service provider customers around the world. They are the industry leader in DNS, DHCP, and IP address management, the category known as DDI. We empower thousands of organizations to control and secure their networks from the core-enabling them to increase efficiency and visibility, improve customer service, and meet compliance requirements.