/course/mobile-api-workshop
Mobile API Contract Workshop
OpenAPI diffs, versioning etiquette, and offline-first edge cases.
Overview
Hands-on with mock servers, contract tests from mobile clients, and graceful degradation when fields disappear. Security topics stay at transport and storage hygiene levels.
Included focus areas
- OpenAPI diff review ritual
- JSON schema snapshot tests
- ETag caching on flaky networks
- Idempotency keys for POST retries
- Certificate pinning caveats
- GraphQL pagination pitfalls overview
- Mock server tenancy for QA builds
Outcomes
- Ship a contract test PR against one endpoint
- Write a degradation matrix for two features
- Run a mock server in CI stub job
Lead mentor
Ethan Cole
Backend liaison for mobile squads; OpenAPI tooling contributor.
FAQ
Out of scope; we highlight OWASP mobile references only.
Mentioned; exercises are REST-first.
Provided for class labs; not for redistribution.
Experience notes
“Contract workshop exposed our silent field drops—client:load tracing exercise was blunt in a good way.”
“ETag lab finally made our offline cache predictable on Melbourne trains.”