API development is hard, especially if we need to add security. There are so many things to worry about!

We know we can specify an API as an OpenAPI document. But how far can we extend this data-driven approach? Can we implement security, durability, behaviour? This talk will attempt to answer some of these questions, in part, by delving into the design of Site, an open-source API-platform I have been helping to build. I will explain the advantages of a ‘data-first’ mindset in the development and evolution of APIs, and how we can begin to make the development and deployments of secure APIs a little easier.