API Gateway Documentation

Find comprehensive guides, tutorials, examples, best practices, and architectural details to get the most out of the Membrane API Gateway.

1. Introduction

• Getting Started Guide (~2 minutes)
• Tutorial (~30 minutes)
• Deployment Guide
• Performance Benchmarks

2. OpenAPI Integration

• Configuration and Validation with OpenAPI
• API Documentation and Swagger UI Integration

3. Security

• Overview of Security Features
• JWT Validation with Azure AD
• OAuth2 Authentication with Postman
• Automatic Certificate Renewal (ACME)
• Protecting against XML Attacks and DoS
• CORS Guide for API Developers
• Data Loss Prevention API

3.1 Oauth2 Tutorials

• Authorization Code Flow (Membrane)
• Implicit Flow (Browser Clients)
• Client Credentials Flow (API Access)
• With GitHub (Login Integration)
• With Google (Web App Login)
• OpenID Connect (External Providers)

4. Legacy Integration

XML

• XML Basics for API Professionals
• What is a XML API Gateway?

Web Services

• What is SOAP? Web Services explained for API developers (2026)
• WSDL Explained How to read a WSDL. A beginner’s guide.

SOAP to REST Conversion

• REST GET to SOAP conversion

Security

• WS-Security Between Apache CXF and Membrane API Gateway

5. Plugins and Scripting

• Scripting Overview
  • JavaScript Plugin

6. Operation

• Monitoring with Prometheus

7. Configuration

• Logging with colors

8. Architecture and Internals

• How Membrane Works Internally
• Architecture Guide
• Rule Matching Logic