API Management has now become an essential part of any SOA lifecycle. Learning how to expose your service as APIs and knowing how to secure, control and monitor access to them all has become part of an effective API management solution. In this tutorial we hope to cover extensibility options of API management best practices of API management in areas including API design and implementation API architecture API security Deployment architecture

2. ●
●
●
●
●
●
●

3. ●
●
●
●
●
●
●
●

4. ●
●
●
●
●
●

6. ●
○
○
○
○
●
○
○
○
○

7. ●
●
●

18. ●
●
●
●
●
●

19. ●
●
●
●
○
○
○
○

20. •

21. ●

22. ●

23. •

24. •

25. •

26. ●
●
●

27. Client / Partner
LDAP
Gateway
Key Manager
Store Publisher
Back EndJWT Token
JWT Token

28. {
"typ":"JWT",
"alg":"RS256"
}{
"iss":"wso2.org/products/am",
"exp":1345183492181,
"http://wso2.org/claims/subscriber":"admin",
"http://wso2.org/claims/applicationname":"app2",
"http://wso2.org/claims/apicontext":"/placeFinder",
"http://wso2.org/claims/version":"1.0.0",
"http://wso2.org/claims/tier":"Silver",
"http://wso2.org/claims/enduser":"wso2User"
}

30. •
–
–
•

31. ●
●

32. ●
●
http://wso2.com/library/articles/2015/11/article-introducing-wso2-api-manager-new-rest-api-for-store-
and-publisher-operations/
REST API Documentation page
https://docs.wso2.com/display/AM1100/apidocs/publisher/

33. Authentication Layer
Validation Layer
API Manager Implementation Layer
Exception Mapper
REST Service Implementation Layer
Response Flow Request Flow
Interceptor
Interceptor
Interceptor
CXF
Container
Impl to API Model Mapper API to Impl Model Mapper
Service Stubs
Service Implementation
Swagger2CXF
Caching / Concurrency Control Layer
Interceptor

35. ●
●
●
●

36. 1 2
3 3
4
5

43. Client / Partner
Back End
PublisherStoreGatewayKey Manager
WSO2CAR
BON_DB
WSO2AM_
DB

49. Scale out
500
requests
500 X 4
requests
Scale up
API authentication
Message
mediation
Service chaining
Message
mediation
Service chaining
API
authentication
Processing
power 3 unit
per request
Processing
power 1 unit
per request
Processing
power 2 unit per
request