Incoming Message Flow Customization
- Louis Zelus
The API Manager is build on the Enterprise Service Bus, which is an integration tool designed to modify, adjust and transform payloads as they pass through the system. The API Manager allows API Publishers to use these tools in a limited capacity on the requests coming into our APIs.
This opens a lot of possibilities, but the main ones are payload transformation and authorization.
Payload Transformation
The idea here is to present a slightly different API than is offered by the back end. For example if the backend has a complex URL scheme, you may choose to write the API with a simpler scheme and convert the incoming requests to match what the backend expects.
Using Me to access your own records - When a backend is written to expect an ID, but you want use the ID in the user's SSO details rather than expecting it to be passed.
Authorization
IP Verification (mediator) - Check the incoming request to see if it's from a limited set of valid IPs before passing it to the backend.