[SYNCOPE-1455] New component: sra (API gateway)

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0-M0
• Component/s: sra
• Assignee: Francesco Chicchiriccò
• Reporter: Francesco Chicchiriccò
• Created: 03/Apr/19 12:09
• Updated: 05/Aug/22 11:36
• Resolved: 07/Jun/19 14:05

Description

At high-level, this API gateway it's an HTTP reverse proxy exposing a set of public APIs, where the response for invocation of a public API is the result of a configurable process which involves the invocation of one or more internal APIs.

Capabilities:

• configurable mapping between public and internal APIs
• authentication / authorization enforcement
• throttling
• monitor / statistics
• lifecycle management: draft / staging / published / deprecated / ...

For reference / inspiration:

• https://docs.wso2.com/display/AM260/Key+Concepts
• https://istio.io/docs/concepts/what-is-istio/
• https://github.com/getheimdall/heimdall

Good candidate for building upon appears to be Spring Cloud Gateway

Issue Links

• requires: SYNCOPE-1459 Keymaster for Service Discovery

Sub-Tasks

• Protected SRA Routes: OAuth 2.0 / OpenID Connect 1.0: Closed
• Protected SRA Routes: SAML 2.0: Closed
• Protected SRA Routes: CAS: Closed