API Platform 3.6

Florent Chamfroy
Feb 24 · 5 min read

We are pleased to announce that API Platform version 3.6 is now available.

Don’t miss a thing by subscribing to our newsletter to hear about our new releases and the community.

What’s new in API Management?

Here are the new features we would like to highlight :

  • A brand new home page for the console
  • API deployment enhancements
  • New “Logged data masking policy”

New Home page

In the 3.6.0 version, the home page of the administration console is now a multi-dashboard page.

The first dashboard gives you an overview of your platform. Here, you can find the number of APIs and applications you own and a summary status of your APIs.

Home board: overview of your platform

The second dashboard helps you to target your APIs which have an error or a bad condition status. Based on the health-check configuration of each API, you have an overview of the status of your endpoints.

APIs status: overview of your endpoints

On the last dashboard, you can find all of your analytics dashboards. Previously, this page could be accessed from the left menu.

Analytics: configurable dashboards

API deployment enhancements

With this new version, you can now add a specific label each time you deploy an API on your gateway. Not only will you find this information in the API history, but you will also see a mark with this label in your charts for each deployment.

After the deployment #10, the global latency has decreased.

Seeing the consequences of an API deployment is very useful, for example it might be helpful to know whether the overall response time has incresed or whether there are additional errors.

Logged data masking Policy (Enterprise edition)

In the Enterprise Edition of APIM, we provide a new policy to help you to anonymize your logs.

Specially useful for the GDPR compliancy of your data, this policy allows you to replace headers or some specific field in payloads with specific characters.

Configure your rules using json-path, xml-path or directly a regular expression to catch the information to hide.

Configure your rules for the request…
… and for the response

And in the log pages of your API, the fields you configured have been anonymized.

Request log
Response log

And more …

You can find the full changelog here and the list of deprecations and breaking changes here. We have also added the following features:

  • HMAC Authentication Policy
  • Use of the design studio in API history
  • Advanced API logging configuration
  • Use CRON expressions to schedule health-check executions
  • Custom Metrics Policy (Enterprise Edition)

For this, just follow the installation guide and start to play with by using Docker.

The plugins have been deployed here and you can get the distribution here.

You have questions, suggestions, issues, we would be happy to help you from our Gitter channel.

What’s new in Access Management?

Here are the new features we would like to highlight :

  • Application Flows
  • Enriched context policies
  • Application analytics
  • User history
  • Salesforce IdP
  • CAS IdP
  • Reporter file

Application Flows

AM flows have been introduced in the 3.5.0 version. These flows were used at security domain level and shared among all the applications of this domain.

With this new version, you can now define flows for each of your applications.

Application Flows

Enrich context policies

In combination with the new concept of Flow, new policies have been created that can be used to :

  • Enrich user profiles : retrieve additional information from an API and add it to the user profile.
  • Enrich auth flow : share contextual data between authentication flow steps (from login step to token step)

Application analytics

A new section has been added to your applications to give the activity of their users. You will be able to retrieve the following information :

  • Users sign-in activity
  • Users sign-up activity
Application analytics

User history

A new section has been introduced to see the history of the users account activity.

User history


Salesforce integration

A new Salesforce identity provider let users use their Salesforce account to sign in from your applications.

For more information about Salesforce integration, see our user guide to getting started.

CAS bridge

CAS protocol Access Management also provides a new CAS identity provider to automatically authenticate users that are logged-in to your CAS server.

CAS identity provider is part of our Entreprise edition, for more information contact our sales team.

Reporter file

Audit logs can be stored in the database of your choice, either a MongoDB or an SQL database.

Verson 3.6.0 also introduced a new reporter to save your audit trail into files that can be managed by the provider of your choice, for example a Logstash or a Splunk agent.

For more information about reporter file, see our user guide to getting started.

And more …

You can find the full change log here and the list of deprecations here.

To discover all these new features, just follow the installation guide or start to play with by using Docker.

Waiting for your feedback, we would be happy to talk and help you from our Gitter channel.

graviteeio Blog

Medium is an open platform where 170 million readers come to find insightful and dynamic thinking. Here, expert and undiscovered voices alike dive into the heart of any topic and bring new ideas to the surface. Learn more

Follow the writers, publications, and topics that matter to you, and you’ll see them on your homepage and in your inbox. Explore

If you have a story to tell, knowledge to share, or a perspective to offer — welcome home. It’s easy and free to post your thinking on any topic. Write on Medium

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store