Apisecure, 14 & 15 March 2023 - Topher Marie, CTO and Cofounder at Strata Identity.
summary
Proposes wrapping legacy APIs with a facade proxy that first routes raw traffic, then incrementally applies security, protocol transforms and externalized authZ; recommends building the proxy in Go or whatever the team prefers. Cites a customer with 300 applications and estimates 3–6 months per app for full rewrites (decades total), contrasts that with first migrations taking days and later apps migrating in an hour or two. Adds MFA, OAuth at the facade, A/B traffic routing and rollback safety.
AI-written summary · about
chapters (9)
- 0:00API modernization intro
- 2:31Legacy software defined
- 8:07Triggers for modernization
- 12:51Risks of rewrites
- 17:27Facade pattern
- 22:04API protocols & identity
- 26:41Externalizing authorization
- 29:31Modernization tools
- 30:13Q&A
related talks
29mAPI Security in 2017
30mSecure Your Prototypes with OAuth2-Proxy and Anubis
24mTransforming into a Platform for Innovation and Agility
25mAPI Security Deep Dive: Safeguard Your Digital Assets
48mAPI Security for Enterprises fireside chat
51mAPI Security: Securing GraphQL without going around in circles
37mThe Zero Trust Odyssey: Our Journey to Modernize Internal Access
19mCreating a Solid Foundation for API Security