API Manager 1.5.0 - An overview of upcoming features

Ruwan Yatawara, Lakmali BaminiwattaWSO2

September, 2013

About WSO2

● Providing the only complete open source componentized cloud platform

■ Dedicated to removing all the stumbling blocks to enterprise agility■ Enabling you to focus on business logic and business value

● Recognized by leading analyst firms as visionaries and leaders■ Gartner cites WSO2 as visionaries in all 3 categories of application

infrastructure■ Forrester places WSO2 in top 2 for API Management

● Global corporation with offices in USA, UK & Sri Lanka■ 200+ employees and growing

● Business model of selling comprehensive support & maintenance for our products

150+ globally positioned support customers

A look under the hood...

●●●●

○○

●●●●●

API Publisher

●●●●●

API Store

●●

○○○

●●

○○○○

API Gateway

Upcoming features of API Manager 1.5.0

Support for Multi Tenancy

● Tenant Isolated API Publisher & API Store

● Public Store linking to all tenant Stores

Support for Multi Tenancy

Publishing to Multiple API Stores

● APIs can be published to multiple external Stores

● WSO2 API Store● Support for non-WSO2 Stores (future)

● Pre configure external store(s)

● When creating APIs select external stores

● Can publish APIs to another tenant's store

Publishing to Multiple API Stores

Publishing to Multiple API Stores

● Throttling :○ Application level throttling○ Subscription level throttling○ Resource level throttling

Throttling and API Access Control

● Tier Permissions:Restrict access to throttling tiers by user roles.

E.g. Users of Role-X is denied access to Platinum Tier

● Transport Level Restrictions:API Providers can choose to limit the transport channels on which an API is exposed.

E.g. HTTPS ✓ HTTP ✘

Throttling and API Access Control

Support for multiple GW Environments

● Instead of a hybrid gateway that routes calls to both production & sandbox environments, users can now configure two separate gateways.

● Custom mediation extension points for In and Out messages through the API Gateway.

■ Global Extensions : Apply to all the APIs

■ Per-API Extensions : Apply only to an intended API

● Select predefined sequences from the API Publisher, while creating the API

Custom Mediation Extension Points

Custom Mediation Extension Points

OAuth2 based authentication● SAML2 Bearer Assertion Profile Support

Documenting an API with Swagger● Swagger is used for fine grain API Documentation.● Store users may also use it as a sample

invocation client.

Load Balanced Data Publisher● API Manager can be configured to publish data to

multiple event streams, with support for load balancing and failover in the event stream scope.

Customizing API Manager

● Changing the Theme

● Categorizing APIs

● Changing language settings

● Single login for all apps

Some Examples :http://store.apicultur.com/https://developer.stubhub.com/store/https://apistore.dialog.lk/store/

Wrap Up…

● Support for Multi Tenancy● Publishing to multiple API stores.● New capabilities in throttling and restricting API

access.● Support for multiple gateway environments.● Support for custom mediation extensions points.● OAuth2 based API authentication.● Documenting APIs with swagger● Load Balancing data publisher● Customizing API Manager

Engage with WSO2

●Helping you get the most out of your deployments●From project evaluation and inception to development

and going into production, WSO2 is your partner in ensuring 100% project success