API Management is a vital platform for an organization to expose its services in a secured and governed manner. However, the challenges and concerns associated with exposing GraphQL services for application developers are different from the traditional REST or SOAP-based endpoints. This introduces a need to adopt an API management platform that specifically treats GraphQL characteristics as first-class citizens. This slide deck covers - What API management means - What to expect from an API Management platform to manage GraphQL services More info: https://www.meetup.com/GraphQL-Sydney/events/275488256

1. API Management for GraphQL
Feb 10, 2021

2. Hello!
Fazlan Nazeem
fazlann@wso2.com
fazlan077

3. ● API Management
● GraphQL API Management
● Q&A
Agenda
3

4. Client to Server Communication
4

5. Cross-Cutting Concerns for Services
● Authentication
● Authorization
● Rate-limiting
● Analytics
5

6. API Management

7. API - The Interface
7

8. Many applications trying to
access different APIs

9. API Management
What does API management
offer?
●
●
●
●
●
●

10. GraphQL API Management

11. Components of a Typical API Management Platform
● Gateway
● Portals :
⦿ App developer portal
⦿ API developer portal
⦿ Admin portal
● Analytics Engine
11

12. API Developer Portal

13. ● Import an SDL file to create an API
13
API Developer Portal

14. ● Analyze the available operations and its types
14
API Developer Portal

15. ● View/Download the schema definition file of an already created API
15
API Developer Portal

16. ● Set a suitable rate-limiting policy per operation
16
API Developer Portal

17. ● Set suitable authorization levels for each operation (scopes)
17
API Developer Portal

18. ● Enable/disable security for each operation
18
API Developer Portal

19. ● Assign complexity values for each operation and its fields
19
API Developer Portal

20. Application Developers

21. ● Filter/Categorize GraphQL APIs
21
Application Developer Portal

22. ● View available operations
22
Application Developer Portal

23. ● Download the GraphQL schema
23
Application Developer Portal

24. Application Developer Portal
● GraphQL specific try-out tool
24

25. Application Developer Portal
● View assigned complexity values
25

26. Administrators

27. ● Create rate-limiting policies with
⦿ Max depth
⦿ Max complexity
27
Admin Portal

28. Gateway/Runtime

29. ● Enforce operational level
⦿ Authentication
⦿ Authorization
⦿ Rate limiting
● Depth analysis
● Complexity analysis
● Subscription support
29
Gateway

30. Analytics

31. ● Operational-level analytics
● Identify time consuming operations
● Retire unused operations
31
Analytics

32. 32
Analytics - Latency

33. 33
Analytics - Usage Count

34. Summary

35. ● API management is a common requirement for all types of APIs
● GraphQL APIs can be exposed via API management platforms even without
first-class support for its characteristics
● GraphQL characteristics need to be specifically treated in order to reap the
maximum benefits of GraphQL APIs in an API management platform
35
Summary

36. ● Download and try-out
⦿ wso2.com/api-management
● Slack Channel
⦿ wso2-apim.slack.com
● Github
⦿ github.com/wso2/carbon-apimgt
⦿ github.com/wso2/product-apim
36

37. 37
Giveaway!!
Fill in the form here to get
this ebook.
Send me an email
(fazlann@wso2.com), I’ll send
over a discount code.

38. Question Time!
38

39. Thanks!