2

The World Bank API is created in API Cloud and it can be invoked from API Console as well as from curl command through on-premises gateway.

curl -X GET --header 'Accept: text/xml' --header 'Authorization: Bearer 942967aa-9e7f-3c4b-823e-87da7cf6e6ee' 'https://localhost:8243/t/devmr/wb/1.0.0/countries/usa' -k

What is the recommended practice to make sure that consumer applications can invoke only through on-premises gateway?

Martijn Pieters
  • 1,048,767
  • 296
  • 4,058
  • 3,343
devmr
  • 21
  • 2

1 Answers1

0

You can restrict access to your API based on IP address. You can white label the ip address of on-premises gateway and allow access from only that ip address as described in this article. This article speaks about WSO2 API Manager, you can do this in API Cloud as well.

Fathima
  • 85
  • 1
  • 1
  • 9