research Archives

AuthZEN: Standards-based API authorisation for API gateways

Discover the challenges of deep API authorization and the risks of coupling access control tightly within the API gateway.

Gateways can be available as hardware appliances, deployed to virtual machines and even as a pure SaaS – here’s some deployment options.

We explain how integration testing works and how to implement it using recommendations to enhance API management solutions’ efficiency.

We’re sharing the knowledge we gained at KubeCon so you can optimise your API management practices for the cloud-native landscape.

Product-centric api-first approach to developing APIs, viewing them as discrete products. Learn more about the API first approach.

Improper asset management leads to technical debt and reduce agility, making applications vulnerable to attacks. Read our guide!

Injection vulnerability is caused by not validating user input, where that input is later used verbatim without any protection mechanisms.

Looking at different architectural deployment patterns for API Management and assess the merits of each, along with any potential drawbacks.

The Strangler Fig pattern is a long-established approach for incrementally replacing legacy systems. How can it be applied to API Management?

Oauth token exchange – OAuth2 Token Exchange RFC8693 is a delegation protocol which allows an API Gateway to authenticate with an upstream.