Gravitee.io API Platform 3.3

Azize Elamrani
Oct 19, 2020 · 4 min read

We are pleased to announce that Gravitee.io API Platform version 3.3 is now available.

Don’t miss a thing by subscribing to our newsletter to hear about our new releases and the Gravitee.io community.

What’s new in API Management?

Here are the new features we would like to highlight :

  • Support for Swagger’s custom vendor extensions

Support for Swagger’s custom vendor extensions

In this version, you will be able to add more information to OpenAPI specifications about your API by using a specific extension. To do this, you need to add the x-graviteeio-definition field in the root of the specification. The value of this field is an Object that follows this JSON Schema.

Here is an example:

openapi: "3.0.0"
info:
version: 1.2.3
title: Gravitee.io Echo API
license:
name: MIT
servers:
- url: https://demo.gravitee.io/gateway/echo
x-graviteeio-definition:
categories:
- supplier
- product
virtualHosts:
- host: api.gravitee.io
path: /echo
overrideEntrypoint: true
groups:
- myGroupName
labels:
- echo
- api
metadata:
- name: relatedLink
value: http://external.link
format: URL
picture: data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7
properties:
- key: customHttpHeader
value: X-MYCOMPANY-ID
tags:
- DMZ
- partner
- internal
visibility: PRIVATE
paths:
...

Online documentation: https://docs.gravitee.io/apim/3.x/apim_publisherguide_manage_apis.html#vendor_extensions

Automatic validation (JSON / XML) with swagger / OpenAPI

One of the most powerful features of APIM is the ability to import an OpenAPI specification to create an API. By doing so, you do not have to complete all the fields required when you are creating a new API from scratch.

Since this version you can import a swagger / OpenAPI descriptor and apply validations according to the model / restrictions defined.

Image for post
Image for post
Import OAI options

Online documentation: https://docs.gravitee.io/apim/3.x/apim_publisherguide_manage_apis.html#import_an_api

Protect backends against spikes (spike arrest policy)

Spike-Arrest Policy configures the number of requests allow over a limited period of time (from Seconds to Minutes). This policy prevents request spikes by throttling incoming requests.

For example, a SpikeArrest policy configured to 2000request/second will limit the execution of simultaneous requests to 200 requests per 100ms.

Online documentation: https://docs.gravitee.io/apim/3.x/apim_policies_rate_limiting.html

And more …

You can find the full changelog here and the list of deprecations and breaking changes here. We have also added the following features so you can:

  • Policy AWS Lambda Function

For this, just follow the installation guide and start to play with Gravitee.io by using Docker.

The plugins have been deployed here and you can get the distribution here.

You have questions, suggestions, issues, we would be happy to help you from our Gitter channel.

What’s new in Access Management?

Here are the new features that we would like to highlight :

  • User advanced search

User search

Image for post
Image for post
Advanced search

User search allows you to retrieve user profile details using Gravitee.io AM’s Management API and the SCIM protocol.

The query syntax is based on the SCIM Filter expression and allow to apply a combination of terms to search your users.

For more information about searching users, see our user guide to getting started.

JDBC

Gravitee.io Access Management now provides integration with SQL databases to let users to sign in to your applications.

The following SQL databases are supported :

  • PostgreSQL

For more information about JDBC identity provider, see our user guide to getting started.

Twitter

Image for post
Image for post
Twitter integration

Gravitee.io Access Management also provides integration with Twitter to let users use their Twitter account to sign in to your applications.

For more information about Twitter integration, see our user guide to getting started.

FranceConnect

Image for post
Image for post
FranceConnect integration

FranceConnect is the French government Identity Provider that connect million of legal accounts. You can connect to it with credentials such as your National Insurance Number, postal address and more.

Gravitee.io Access Management lets you connect your applications with a FranceConnect account.

For more information about FranceConnect integration, see our user guide to getting started.

And more …

You can find the full change log here and the list of deprecations here.

To discover all these new features, just follow the installation guide or start to play with Gravitee.io by using Docker.

Waiting for your feedback, we would be happy to talk and help you from Gitter channel.

graviteeio

Gravitee.io Blog

Medium is an open platform where 170 million readers come to find insightful and dynamic thinking. Here, expert and undiscovered voices alike dive into the heart of any topic and bring new ideas to the surface. Learn more

Follow the writers, publications, and topics that matter to you, and you’ll see them on your homepage and in your inbox. Explore

If you have a story to tell, knowledge to share, or a perspective to offer — welcome home. It’s easy and free to post your thinking on any topic. Write on Medium

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store