Understanding	the	WSO2	API	
Management	Pla7orm	
Nuwan	Dias	
Architect	
WSO2
What	is	an	API?	
•  A	contract	between	a	consumer	and	a	provider.	
•  Available	over	the	network/internet.	
•  Used	by	other	programmers.	
•  Exposed	over	a	consistent	Technology	Stack	
– REST	over	HTTP(s)	
– JSON/XML	
– OAuth
API	Pla7orm?	
	
	
	
	
	
	
	
Image	source:	www.postano.com
APributes	of	an	API	Pla7orm	
•  Adapts	to	surrounding	environment.	
•  Allows	building	on	the	pla7orm’s	core	values	to	create	new	value	
for	consumers.	
•  Is	a	hub	for	innovaSon.	
•  A	catalysts	for	growth.
API	Gateway	
Authentication
Authorization
Rate Limiting
Caching
Mediation
Routing
Feeding the Analytics
Engine
API	Security	
•  AuthenScaSon	-	Valid	OAuth	2.0	Token	
•  AuthorizaSon	-	OAuth	“scope”	
•  Single	Sign	On	
•  Social	Logins	
•  User	Account	Management
Advanced	API	Security
Rate	LimiSng	
•  To	protect	your	back-end	systems/services	
•  Defining	“quotas”	to	moneSze	your	APIs.	
•  Fair	Usage	across	all	ApplicaSon	users	
•  Advanced	Policies	
–  Rate	limiSng	by	Geography,	Device	Type,	etc	
–  BlacklisSng
Rate	LimiSng	-	Architecture
APIs	and	the	IntegraSon	Pla7orm
APIs:	Composing	Them	
•  CreaSng	a	simple	API	for	device	specific	composiSon	
	
•  PaginaSng,	Filtering	(making	things	smaller)	
	
•  Batching	requests,	PopulaSng	a	new	Data	Structure	(making	
things	bigger)	
	
•  Inlining	References
AnalyScs:	Gebng	Insights	on	your	API	
Pla7orm
Centralised	Governance	
Applications APIs
Services /
Microservices
Central Governance Across All Enterprise Assets
WSO2	API	Management	Pla7orm
Scalable	Deployment
Thank	You!	
#WSO2ConEU	
Share	your	feedback	for	this	session	
wso2con.com/app

WSO2Con EU 2016: Understanding the WSO2 API Management Platform