JAPER API
The JAPER API is a core component of JAPER Technology, designed to provide barcode domain services with validated data access for business and customer relations. It is built using a RESTful design and adheres to API First principles, ensuring that all functionality of JAPER Technology is available through the API. The API is written in JavaScript and hosted on Amazon Web Services (AWS) using several components like Route 53, API Gateway, Lambda, DynamoDB, SQS, SNS, S3, CloudFront, and CloudWatch.
Security is a significant aspect of the JAPER API, and it incorporates various security standards and mechanisms to ensure the protection of data and communications. Some of these security features include:
- Encryption: JAPER API uses AES (Advanced Encryption Standard) for securing data. All data within JAPER is encrypted both in motion and at rest, ensuring a high level of security.
- Authentication and Authorization: The JAPER API requires at least a HEADER parameter (x-api-key) which is a secret 40-character JAPER API Key provided under agreement by Japer Technology Pty. Ltd. for most API calls. For some calls, an additional parameter (aid), a secret 44-character JAPER Application ID, is also required. These keys help authenticate and authorize the applications and devices that access the API.
- Zero Trust Mechanism: JAPER follows the Zero Trust approach, treating every call to the JAPER API as potentially hostile. All security access must be justified by bearer tokens, ensuring that only authorized applications and devices can access the API.
- Privacy by Design: JAPER API is designed with privacy in mind, with the JAPER App hardened against prying and the JAPER API itself being hardened against penetration. This approach ensures a high level of privacy protection for both businesses and customers.
In addition to these security features, the JAPER API uses various standards and technologies, such as:
- JSON (JavaScript Object Notation): JAPER is a JSON First company, meaning that the primary method of passing and receiving information when using the JAPER API is through JSON.
- QR Codes and PDF419 Barcodes: JAPER API can read and create QR Codes and PDF419 barcodes, which are used for optical encryption and storing information in an encrypted database.
- AWS Components: JAPER API relies on several AWS components, such as Route 53 for DNS management, API Gateway for managing and securing API calls, Lambda for serverless computing, DynamoDB for the database, and many others.
- JavaScript and NodeJS: JAPER API is built using JavaScript and NodeJS, which are popular technologies for developing scalable and efficient web applications and APIs.
In conclusion, the JAPER API is a robust and secure API designed to provide barcode domain services with validated data access. It incorporates various security features, such as encryption, authentication, authorization, and Zero Trust mechanisms, ensuring the protection of data and communications. Additionally, it uses several standards and technologies, like JSON, QR Codes, PDF419 barcodes, AWS components, JavaScript, and NodeJS, to deliver a powerful and efficient API for JAPER Technology.