Securing APIs With WSO2 Microgateway

Introduction

APIs handle practically every function in modern organizations. From booking a movie ticket to processing complex bank transactions, APIs play an important role. Organizations expose their services via APIs to the public and also internally in order to expand their business opportunities and increase revenue. 

As a result, APIs are being used by multiple parties and people, both internally and externally. It is very important that only authorized users can use specific APIs, so that there is no misuse of APIs that consume valuable data and services of an organization.

Architecting a Modern Digital Platform With Open-Source Software

The digital business landscape is helping businesses to grow beyond geographical boundaries. Transforming your business into a digital business is no longer an optional thing, rather it has become a necessity. Early adopters, late boomers, methodical players, every enterprise is trying to modernize its enterprise IT ecosystem to improve the efficiency and become a leader in their respective enterprise domain. If you are an enterprise architect who is responsible for building a digital platform from scratch, modernize an existing IT platform or lift and shift an existing deployment into the cloud, there are hundreds of different software and technology vendors available to support your effort. The days of proprietary software is long gone and people are more and more migrating towards open-source software (OSS). One of the major challenges of adopting OSS is the maintenance overhead. But that challenge is absorbed by the mega-cloud vendors as well as other cloud services offered by the vendors who created these OSS IP.

In this post, I'm going to discuss building a modern digital platform with OSS. Most of the software components I'm using here are free to download and play around. If you really need to build a production-grade system, it is recommended to get commercial support from the respective vendors. The other important aspect of this architecture is that it is vendor-neutral. You can replace any vendor with OSS or proprietary software without impacting the overall architecture. The components are loosely coupled and can deploy and run independently.