Security

• Redirect requests to SSL
• Add CORS headers to responses
• Remove HTTP Headers
• Change backend error messages
• Secure APIs with JWT and Scope Validation
• Secure OpenAPI resources using JWTs and RBAC
• Forward a Custom Claim from JWT into HTTP Header
• Rate-Limit Requests by JWT Claim
• Outbound Traffic

Traffic Management

• Route requests by URL path or method
• Route requests by HTTP header
• Route requests by query parameter
• Perform weighted canary routing
• Mirror production requests to a test environment

Modification and Transformation

• Rewrite request paths
• Rewrite the Base URL of OpenAPI definitions
• Change response status codes
• Set custom HTTP headers
• Return static JSON responses

Debugging and Testing

• Log API requests and responses
• API greasing for JSON documents

Legacy Integration

• REST GET to SOAP conversion fassade

API Management

• API Management through APIOps