Questions tagged [ibm-api-management]

APIs deliver data and information to apps, enabling innovative businesses to transform themselves. IBM API Management enables API owners to define, secure, control, and publish APIs to developer communities, as well as to analyze API usage.

APIs deliver data and information to apps, enabling innovative businesses to transform themselves. The IBM® API Management for Bluemix® service enables API owners to define, secure, control, and publish APIs to developer communities, as well as to analyze API usage.

178 questions
40
votes
8 answers

What is the difference between API Gateway and ESB?

ESB is traditional middleware used in SOA solutions for routing, message transformation, protocol bridging, among other things. A new category of middleware solutions called API Gateway are now offered by several vendors. These solutions are…
Paulo Merson
  • 13,270
  • 8
  • 79
  • 72
8
votes
1 answer

What is the server discovery endpoint (well-known url) of a AWS Cognito Userpool?

OpenID providers publish their metadata at a well-known URL. In Okta it looks something like this: https://dev-599740.okta.com/oauth2/default/.well-known/oauth-authorization-server Is there a similar URL for a AWS Cognito user pool? if not how do I…
5
votes
1 answer

Microsoft Azure API Management - Cache policy doesn't work

I have tried to set a caching policy in Azure API Management as follows:
5
votes
0 answers

Disable Weak TLS Cipher Suites on APIM

I've just discovered few weak ciphers listed on a report I just ran: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH secp384r1 (eq. 7680 bits…
5
votes
2 answers

Securing API App Service sitting behind Azure API Management

I have a design issue that I've been struggling with in Azure. I have created a .NET Core API and deployed it as an App Service in Azure. On top of that, I have an instance of Azure API Management with oAuth 2 securing it. I was able to achieve this…
Colbs
  • 587
  • 10
  • 25
5
votes
0 answers

APIConnect JSON array returned from external service issue

We have a Rest API which contains in its assembly only an 'invoke' to an external Rest service without any mapping, such that the API will act only as a gateway. If the external service is called directly (e.g. through SoapUI), it returns a JSON…
Daniele Chirivì
  • 466
  • 4
  • 11
4
votes
1 answer

Kong custom error message / response

We are looking to override Kong error response structure and write custom messages (i.e. replace "API rate limit exceeded", "Invalid authentication credentials" and others with our custom messages). The error response structure we are looking for…
urgas9
  • 806
  • 9
  • 22
4
votes
1 answer

Right way to handle old versions of mobile app when your database schema has changed

i have an ionic android mobile app which connects to a ruby on rails api server and this app uses postgresql as database server. whenever i create a new feature i deploy both, the api and the new app to the app store and bump the respective versions…
3
votes
1 answer

Should I validate JWT twice (in API gateway and service itself)?

I'm currently setting up a API gateway for our services. The API gateway handles the Token Validation (via OpenID Connect). The request is only routed to the target backend service if the token is valid. Should I then also validate token in the…
Raman
  • 548
  • 1
  • 7
  • 17
3
votes
1 answer

How Can I Reuse the Response Context Variable in Azure API Management Policy?

I'm writing a proof of concept utilising the Azure API Management solution. I am trying to write an policy which does the following: Uses to make a request to an authentication endpoint of an API. The authentication API…
Andrew Chart
  • 623
  • 6
  • 10
3
votes
3 answers

Using Azure CLI to manage API Management (APIM) Users, Products, Certificates, APIs

It seems that this page contains all the functionality that Azure CLI supports in regard to Azure API Management. But it doesn't show how to manage entities such as users, products, certificates, subscriptions, and APIs using Azure CLI. Does Azure…
Ehsan Mirsaeedi
  • 6,924
  • 1
  • 41
  • 46
2
votes
1 answer

Azure API Management logs request and response bodies

I would like to log the request and response bodies of my API calls in Azure API Management for debugging purpose. To do that I have created a Log Analytics workspace and configured the diagnostic settings to store the logs in it. But when I check…
2
votes
1 answer

Azure API management always returning 404 resource not found

I have an API instance in AZURE where the configurations are as below. API endpoint : corol.abpparking.domain.com API suffix : myaboutpage Backend Webservice URL : http://10.20.10.2:8080/api/v1/ What works If i call the webservice URL directly as…
2
votes
1 answer

View the published Developer Portal without private browsing mode in Azure API Management

When accessing the new developer portal in Azure API Management in the same browser session in which being connected to Azure, the administrative version of the portal is opening. However, developers of my team use to develop API, but also to…
2
votes
2 answers

Add multiple products to subscription on Azure API Management Service

As we're developing the SaaS APIs and we're using Azure API Management service to manage the APIs. We have defined the API products as described below: Organization (product) This product contains sets of APIs to manage organizations. Inventory…
nunu
  • 3,184
  • 10
  • 43
  • 58
1
2 3
11 12