An Alternative to Required API Keys

Requiring API keys to JSON services for publicly available data is leading us down the unfortunate path to screen scraping and HTML parsing. The justification for requiring API keys is that abuses of these data APIs are rampant and without the keys there would be no way to deal with bad behavior. Rate limiting is one approach but it is easily gamed. We need a better solution.

Required keys make it much harder for developers to learn new things. I recently created a sample application for Typesafe Activator called Reactive Stocks which fetches publicly available tweets and then does a sentiment analysis on the tweets. The goal of the sample is to quickly teach developers about how to build Reactive applications. If each developer had to go through the process of setting up Twitter API keys just to get the app running, many would give up. Most developers prefer to instantly see something working and then deconstruct it to learn how it works.

OSCON Workshop: 6 Minute Apps! Build Your First Modern Web App

Next week at OSCON 2013 in Portland I’ll be leading a hands-on workshop on Monday at 1:30pm where we’ll build a modern web app with Play Framework and Scala. Here are the details:

6 Minute Apps! Build Your First Modern Web App

The web application landscape is rapidly shifting back to a Client/Server architecture. This time around, the Client is JavaScript, HTML, and CSS in the browser. The tools and deployment techniques for these types of applications are abundant and fragmented.

Scala Summit 2013

This summer Bruce Eckel will be hosting the Scala Summit in Crested Butte on August 19 - 21. I’ve been to many of Bruce’s events and they are my favorites. The hallway conversations at regular conferences are always the best and most educational part, so why not have a conference that is just the interactive bits? The OpenSpaces style is only interactive. The agenda at an OpenSpaces conference is determined by the attendees. This leads to rich discussions and collaborative project hacking. I usually bring a project I want to work on with others and then find people who want to write some code with me. This year at the Scala Summit I’ll be working on some Scala template apps for Typesafe Activator. Hopefully you can join me!

Securing Single Page Apps and REST Services

The move towards Single Page Apps and RESTful services open the doors to a much better way of securing web applications. Traditional web applications use browser cookies to identify a user when a request is made to the server. This approach is fundamentally flawed and causes many applications to be vulnerable to Cross-Site Request Forgery (CSRF) attacks. When used correctly, RESTful services can avoid this vulnerability altogether. Before we go into the solution, lets recap the problem.

Presenting Play Framework at Devoxx UK & FR 2013

This week I’m at Devoxx UK and Devoxx FR presenting about Play Framework. Here are the sessions:

It’s going to be an awesome week!

Utah JUG: Client/Server Apps with Play Framework, HTML5 and Java

Tonight (Feburary 21, 2013) I will be presenting at the Utah JUG about Client/Server Apps with Play Framework, HTML5 and Java. Here is the session description:

The web application landscape is rapidly shifting back to a Client/Server architecture. This time around, the Client is JavaScript, HTML, and CSS in the browser. The tools and deployment techniques for these types of applications are abundant and fragmented.

This session will teach you how to pull together jQuery, LESS, Twitter, Bootstrap, and some CoffeeScript to build the Client. The Server could be anything that talks HTTP, but this session will use the Play Framework.