APIs
- Engineering
- Last Updated: April 16, 2025
- Matt Tanner
- Engineering
- Last Updated: July 29, 2024
- Julián DuqueParvez Mohamed, Andrea Bernicchia
In today’s fast-paced digital world, companies are looking for ways to expose their APIs and microservices to the internet while enhancing their overall API security. MuleSoft Anypoint Flex Gateway is a powerful solution that solves this problem.
Let’s walk through deploying the Anypoint Flex Gateway on Heroku in a few straightforward steps. You’ll learn how to connect your private APIs and microservices on the Heroku platform through the Anypoint Flex Gateway which provide comprehensive API management capabilities without the hassle of managing infrastructure. Get ready to unlock the potential of this potent pairing and, in the future, integrate it with Salesforce.
…
- Engineering
- Last Updated: April 29, 2024
- Julián Duque
If you’re an API developer working with Node.js, then you’re probably familiar with Express. But have you tried out the Fastify framework to build with power, speed, and convenience? In this walkthrough, we build a full-featured, easy-to-consume API with Fastify. And we deploy it to the cloud with ease. We show you how to:
Get started working with Fastify to build an API
Implement API authentication by using a JSON web token (JWT)
Use Fastify’s Swagger plugins to generate an OpenAPI specification
Consume the OpenAPI specification with Postman, giving you an API client that can send requests seamlessly to your…
- Engineering
- Last Updated: March 28, 2024
- Julián Duque
How to connect your GPT on OpenAI to a backend Node.js app
Late in 2023, OpenAI introduced GPTs , a way for developers to build customized versions of ChatGPT that can bundle in specialized knowledge, follow preset instructions, or perform actions like reaching out to external APIs. As more and more businesses and individuals use ChatGPT, developers are racing to build powerful GPTs to ride the wave of ChatGPT adoption. Source If you’re thinking about diving into GPT development, we’ve got some good news: Building a powerful GPT mostly involves building an API that handles a few…
- News
- Last Updated: May 19, 2022
- Shyam Subramanyan
[ Update: May 25, 2022 – GitHub integration is now re-enabled. You can connect to GitHub immediately or wait for the enhanced integration as described below. To re-establish your GitHub connection now, please follow these instructions .]
We know you are waiting for us to re-enable our integration with GitHub, and we’ve committed to you that we would only do so following a security review. We are happy to report that the review has now been completed.
One of the areas of focus was a review of the scope of tokens we request from GitHub and store on your behalf. Currently, when…
- Engineering
- Last Updated: June 03, 2024
- Richard Schneeman
When API requests are made one-after-the-other they’ll quickly hit rate limits and when that happens:
If you provide an API client that doesn’t include rate limiting, you don’t really have an API client. You’ve got an exception generator with a remote timer.
— Richard Schneeman Stay Inside (@schneems) June 12, 2019
That tweet spawned a discussion that generated a quest to add rate throttling logic to the platform-api gem that Heroku maintains for talking to its API in Ruby.
If the term “rate throttling” is new to you, read Rate limiting, rate throttling, and how they work together…
- Engineering
- Last Updated: June 24, 2020
- Owen Ou, Chris Castle
Over the last few years, GraphQL has emerged as a very popular API specification that focuses on making data fetching easier for clients, whether the clients are a front-end or a third-party.
In a traditional REST-based API approach, the client makes a request, and the server dictates the response:
$ curl https://api.heroku.space/users/1
{
“id”: 1,
“name”: “Luke”,
“email”: “luke@heroku.space”,
“addresses”: [
{
“street”: “1234 Rodeo Drive”,
“city”: “Los Angeles”,
“country”: “USA”
}
]
}
But, in GraphQL, the client determines precisely the data it wants…
- News
- Last Updated: April 04, 2024
- Sepideh Setayeshfar
Faster application delivery with remote teams is the key to connect with your customers, now more than ever. A few years ago, we released Review Apps with the goal of improving the application development process and team collaboration. Today, we are excited to announce the release of an improved version of Review Apps to general availability.
The new version of Review Apps provides easier access management with a new permission system, and more flexibility for complex workflows with public APIs. It also no longer needs a staging, production, or placeholder app to host its configuration and collaborator access; this independence supports…
- Engineering
- Last Updated: June 03, 2024
- Jessie Young
Heroku has many public API endpoints. Each of these endpoints needs to be tested so that we know how they work, and documented so that our customers (and other API consumers) know how they work. Follow along, and we’ll learn how Heroku uses JSON Schema to test and document our Platform API – and how it helped us uncover an unexpected bug, rooted in the way the Oj gem parses Big Decimals.
JSON Schema files are like blueprints that define the structure and semantics of other JSON documents. When a JSON Schema file is applied to a JSON document, you can…
- Engineering
- Last Updated: August 14, 2018
- Chris Castle
This is the first in a series of blog posts examining the evolution of web app architecture over the past 10 years. This post examines the forces that have driven the architectural changes and a high-level view of a new architecture. In future posts, we’ll zoom in to details of specific parts of the system. The standard web application architecture suitable for many organizations has changed drastically in the past 10 years. Back in Heroku’s early days in 2008, a standard web application architecture consisted of a web process type to respond to HTTP requests, a database to persist…
Subscribe to the full-text RSS feed for Engineering.