The WSO2 API Manager 1.4.0 Released!

The WSO2 API Manager team is pleased to announce the release of version 1.4.0 of the Open Source API Manager.

WSO2 API Manager is a platform for creating, managing, consuming and monitoring APIs. It employs proven SOA best practices to solve a wide range of API management challenges such as API provisioning, API governance, API security and API monitoring. It combines some of the most powerful and mature components of the WSO2's state-of-the-art Carbon platform to deliver a smooth and end-to-end API management experience while catering to both API publisher and API consumer requirements.

WSO2 API Manager is comprised of several modules.

  • API Provider: Define new APIs and manage them
  • API Store: Browse published APIs and subscribe to them
  • API Gateway: The underlying API runtime based on WSO2 ESB
  • API Key Manager: Performs Key Generation and Key Validation functionalities

WSO2 API Manager is developed on top of the revolutionary WSO2 Carbon platform (Middleware a' la carte), an OSGi based framework that provides seamless modularity to your SOA via componentization. This release also contains many new features and a range of optional components (add-ons) that can be installed to customize the behavior of the API Manager. Further, any existing features of the product which are not required in your environment can be easily removed using the underlying provisioning framework of Carbon. In brief, WSO2 API Manager can be fully customized and tailored to meet your exact API management needs.

For more information on WSO2 API Manager please visit http://wso2.com/products/api-manager. Also take a look at the online product documentation.

How to Run

  1. Extract the downloaded zip
  2. Go to the bin directory in the extracted folder
  3. Run the wso2server.sh or wso2server.bat as appropriate
  4. Launch a web browser and navigate to https://localhost:9443/publisher to access the API provider webapp
  5. Navigate to https://localhost:9443/store to access the API store
  6. Use "admin", "admin" as the username and password to login as an admin
  7. If you need to start the OSGi console with the server use the property -DosgiConsole when starting the server. The INSTALL.txt file found on the installation directory will give you a comprehensive set of options and properties that can be passed into the startup script

New Features of WSO2 API Manager 1.4.0

This release of API Manager comes with a horde of new features and bug fixes.

New Feature

  • [APIMANAGER-839] - Implement specifying the Authentication Scheme at resources level
  • [APIMANAGER-841] - Login to API Store with SAML2 Web SSO
  • [APIMANAGER-850] - Domain restrictions for application keys
  • [APIMANAGER-941] - Change default transport in API Manager to pass-through
  • [APIMANAGER-995] - If a user loggedIn using email or using ordinal username, that user should be handled as a single user
  • [APIMANAGER-1017] - Application Blocking functionality on the API Publisher
  • [APIMANAGER-1050] - BAM toolbox is currently added as a bin file.
  • [APIMANAGER-1110] - Adding links to access tenant store from public store and vise versa
  • [APIMANAGER-1212] - Integrate Swagger as the Rest Testing Client
  • [APIMANAGER-1213] - Multi tenancy support
  • [APIMANAGER-1215] - Implement Subscription BLOCK functionality on the Publisher
  • [APIMANAGER-1216] - Login to API Store/Publisher with SAML2 Web Browser SSO
  • [APIMANAGER-1217] - Keep two access token validation time period configs to user access token and application access token
  • [APIMANAGER-1218] - Authorization Code Grant Type for API Manager
  • [APIMANAGER-1219] - Enable configuring the position at which the ExtensionHandler is invoked
  • [APIMANAGER-1220] - Implementing API Sharing Patterns in tenant aware APIManager
  • [APIMANAGER-1221] - Enable tenant aware BAM Stats publishing
  • [APIMANAGER-1222] - Componse Automated Functional Test Script for API Manager
  • [APIMANAGER-1224] - Stratos compatibility with AM

Improvement

  • [APIMANAGER-635] - Allow searching APIs by version
  • [APIMANAGER-679] - Ajaxify the rating actions of the store API UI
  • [APIMANAGER-939] - Remove OAuth Headers From Outgoing Message should be configurable
  • [APIMANAGER-985] - Keep two expiration time configs for Application Token and User Token
  • [APIMANAGER-998] - Add Pizza-Shack sample to default samples set
  • [APIMANAGER-1018] - Enable configuration of Thrift Server Host from configuration file.
  • [APIMANAGER-1020] - Enable configuring the position at which the ExtensionHandler is invoked
  • [APIMANAGER-1028] - Null Checks to be added
  • [APIMANAGER-1030] - Persisted value for super tenant id to be changed from "super_user" to "carbon.super"
  • [APIMANAGER-1040] - Update samples' script with the info
  • [APIMANAGER-1041] - When specifying URLs in Publisher app, append http:// if not specified
  • [APIMANAGER-1045] - Enable API search functionality as tenant awared
  • [APIMANAGER-1046] - Add integration tests covering all the APIM samples
  • [APIMANAGER-1052] - Add application access token validity period config to identity.xml
  • [APIMANAGER-1086] - Provide a method to enable thread sleep similar functionality from jaggery
  • [APIMANAGER-1113] - Change label of the 'Visibility' attribute to 'Advertised' and display available options according to the publisher login type
  • [APIMANAGER-1138] - Re position swagger documentation section in the Store UI
  • [APIMANAGER-1139] - The try me button to be removed from APIs
  • [APIMANAGER-1153] - Change the location of template xmls from inside of the Impl jar to a location inside of the pack
  • [APIMANAGER-1225] - Improve the API Store UI Styling

Bug

  • [APIMANAGER-13] - Shouldn't we support -Dsetup for API Manager DB?
  • [APIMANAGER-71] - API manager DB script for MSSQL
  • [APIMANAGER-252] - [API Provider] Issue in 'API Last Access Times (Across All Versions)' table view in stats pages.
  • [APIMANAGER-274] - [AM on mounted setup] Error when viewing docs
  • [APIMANAGER-293] - [API Provider] Issue when trying to insert special characters when editing contents of an In-line doc.
  • [APIMANAGER-327] - [API Store] 'More APIs from Provider' section doesn't list the maximum number of APIs that can be shown. It displays only oldest active version of some APIs.
  • [APIMANAGER-704] - URL parameter is dropped when forwarding text/xml POST requests to backend
  • [APIMANAGER-715] - Registry operations timeout when adding an API with a wsdl
  • [APIMANAGER-783] - NPE returned when trying to make copies of APIs that has documents with no content
  • [APIMANAGER-794] - Data in IDN_OAUTH2_ACCESS_TOKEN does not get removed on unsubscription
  • [APIMANAGER-796] - Even after an API is Deprecated from the publisher, an application in store can subscribe to it for sometime
  • [APIMANAGER-808] - Error page when viewing system logs from the wizard
  • [APIMANAGER-823] - Store - Signup link changes localhost url call to IP/domain name based call
  • [APIMANAGER-826] - Whats the purpose of the Remove Rating button in API wizard in API store
  • [APIMANAGER-830] - Order of API Mgr Handler invocation and BAM Publication
  • [APIMANAGER-834] - When I publish an API which I created from GReg im getting following issue
  • [APIMANAGER-835] - Unable to load throttling policy using key: gov:/apimgt/applicationdata/tiers.xml
  • [APIMANAGER-836] - API Store Showing ${carbon.local.ip}:${https.nio.port} instead of actual IP address and Port
  • [APIMANAGER-846] - API Mgr throws BAM not connected exception when APIUsageTracking is *disabled*
  • [APIMANAGER-869] - Unable to mount /_system/config space to a remote DB in API manager
  • [APIMANAGER-876] - When there are multiple user stores and when both user-stores have the same role users get assigned to both roles
  • [APIMANAGER-877] - user domains are not shown in edit permission roles wizard
  • [APIMANAGER-878] - ArrayIndexOutOfBoundsException when searching APIs with "version:" key
  • [APIMANAGER-890] - Cannot download an API attachment web running the server with a web context root.
  • [APIMANAGER-891] - APISecurityException when load testing: Invalid use of SingleClientConnManager: connection still allocated.
  • [APIMANAGER-905] - Issues with billing sample
  • [APIMANAGER-916] - ERROR {org.wso2.carbon.apimgt.impl.dao.ApiMgtDAO} - Error while fetching all URL Templates {org.wso2.carbon.apimgt.impl.dao.ApiMgtDAO} java.sql.SQLException: No more data to read from socket
  • [APIMANAGER-928] - [API Provider] Update identity related database scripts with latest changes done for api manager
  • [APIMANAGER-929] - Table missing in 1.3.0 PostgreSQL script
  • [APIMANAGER-930] - Carbon Admin won't list API Metadata
  • [APIMANAGER-935] - Problems with revoke tokens functionality in AM 1.2.0/AM 1.3.0
  • [APIMANAGER-936] - Error returned while publishing APIs that are copies of the original API
  • [APIMANAGER-937] - Error thrown when tries copy a new version of an API which is having documentation on it.
  • [APIMANAGER-940] - All messages being routed through the API Gateway are built when the <includeHiddenServices> parameter is set to true in the realy.xml
  • [APIMANAGER-942] - REST Client in store has the Content-Type hard coded as application/x-www-form-urlencoded.
  • [APIMANAGER-943] - Wrong error msg thrown when trying to invoke an API resource url without appending any query parameters or url string parts to end of the url
  • [APIMANAGER-944] - Key Server does not start on EC2 when Thrift is used
  • [APIMANAGER-946] - APIM Metadata Listing not working
  • [APIMANAGER-947] - An exception when publishing API manager events to BAM (when authentication type for API is none)
  • [APIMANAGER-949] - Correct error message is not propogated to FE when any requests are not yet invoked
  • [APIMANAGER-952] - Issues in new theme ('Dark' theme).
  • [APIMANAGER-953] - NPE thrown when trying to edit content of an In-line doc (when the doc is empty).
  • [APIMANAGER-954] - If an API has an inline doc with no content, That doc (Name & Summary) is not shown in store and NPE thrown when accessing the API.
  • [APIMANAGER-955] - Can APIs Restricted to other roles be visible to Admin?
  • [APIMANAGER-956] - Restricted APIs are visible to Any subscriber who also has 'create, publish' permissions.
  • [APIMANAGER-957] - 'Visible to Roles' field is not validated for valid roles. If there's a typo in a Role name, the API is not visible to any subscriber or anonymous user of the API store.
  • [APIMANAGER-958] - Cannot edit authentication schema of an existing api
  • [APIMANAGER-959] - Tags of Restricted APIs are visible to users in other roles. NPE thrown when those 'Tags' are clicked.
  • [APIMANAGER-960] - RESTClient goes to a non responding state when a request (API access) fails at gateway. Errors thrown in backend.
  • [APIMANAGER-962] - PUT and OPTIONS invocations fail at the Gateway.
  • [APIMANAGER-963] - Startup errors when trying to start a server with a HostName specified in the carbon.xml
  • [APIMANAGER-964] - 'Revoke Tokens' breadcrumb directs you to an invalid page (APIs By Provider - null).
  • [APIMANAGER-965] - In 'Revoke Access Token' page, If you search for an invalid token, no proper UI error given (returns '1') . ArrayIndexOutOfBoundsException thrown in backend.
  • [APIMANAGER-966] - RESTClient 'Response Headers' section doesn't show additional Header fields (Eg: 'Allow:' Header field that is returned for OPTIONS).
  • [APIMANAGER-968] - Allows to Edit and save APIs with Resources that has no HTTP Verbs selected.
  • [APIMANAGER-970] - [SSO] Any user that logs in to IS gets authenticated to login to Publisher and Store. API manager permissions are not validated.
  • [APIMANAGER-971] - [SSO] When API publishers login to 'Publisher UI' via SSO, 'Add API' option is not visible. Therefore cannot create APIs.
  • [APIMANAGER-973] - Allows to regenerate and use 'Access Token(Application Key)'. Should not allow to regenerate once revoked.
  • [APIMANAGER-974] - User tokens doesn't get saved in the correct table when using Multiple User Stores. Therefore cannot Invoke APIs using user tokens.
  • [APIMANAGER-975] - Issue when sending soap body with REST client
  • [APIMANAGER-976] - REST Client get hanged when a request is sent to invalid IP or port
  • [APIMANAGER-978] - Cannot renew User tokens (Token Partitioning enabled).
  • [APIMANAGER-979] - [Documentation] Under 'AccessTokenPartitioning' section, is it possible to mention that 'IDN_OAUTH2_ACCESS_TOKEN_A' table should be created manually?
  • [APIMANAGER-980] - Tags of APIs in 'Blocked' and 'Retired' states are visible to subscribers and therefore they can view those APIs in the store.
  • [APIMANAGER-981] - Cannot login when the username is an email address. Include 'EnableEmailUserName' parameter in carbon.xml.
  • [APIMANAGER-982] - URLs are displayed incorrectly in Store(API info page and REST Client).
  • [APIMANAGER-984] - If we change admin password we cannot login to API manager store and publisher
  • [APIMANAGER-987] - metadata web pages error on APIs, Documents, and Providers
  • [APIMANAGER-988] - Under resource level authentication, 'Application and User Token' should be the default value.
  • [APIMANAGER-989] - AM 1.3.1 cannot be integrated with BAM 2.0.1 [Table "API_REQUEST_SUMMARY" not found]
  • [APIMANAGER-991] - When BAM 2.2.0 is plugged in to AM 1.3.1 with a port offset, get the error Unable to sendViaPost to url[https://127.0.0.1:9443/services/AuthenticationAdmin]
  • [APIMANAGER-992] - Synchronization problem on the Databridge Agent
  • [APIMANAGER-993] - Registry deadlock occurs when load testing the publisher with 20 thread and 10 loops
  • [APIMANAGER-996] - wso2 AM 1.3.1 Transparent proxy broken, [PassThroughMessageProcessor-8] ERROR RelayUtils Error while building Passthrough stream
  • [APIMANAGER-997] - APIM Application Owner is set as the UserName inside the AuthenticationContext
  • [APIMANAGER-999] - API creation process hangs at first attempt on IE8 with AM 1.3.1
  • [APIMANAGER-1000] - Cannot create APIs with AuthType=Application and Application User
  • [APIMANAGER-1001] - Remove creation of unwanted role 'globalAPIPublisher' at server startup
  • [APIMANAGER-1003] - When adding a new API, if verbs are saved with default auth type (Application & Application User) , edit mode shows Application as the Auth Type
  • [APIMANAGER-1004] - When a timeout happen in publisher/store app with SSO enabled,it directs to a login popup box instead the SSO login Page
  • [APIMANAGER-1005] - Exception thrown when JWT generation with additional claims.
  • [APIMANAGER-1006] - Error when logout from APIM apps with SSO enabled
  • [APIMANAGER-1008] - Public/Private segmenting of APIStore due to the change of role name of 'Everyone' as 'Internal/Everyone'
  • [APIMANAGER-1009] - API Usage by Resource Path graph needs to be updated
  • [APIMANAGER-1013] - User re-registration fails
  • [APIMANAGER-1014] - Yahoo Place finder sample intermittently returns 404
  • [APIMANAGER-1015] - problem with genereted user token
  • [APIMANAGER-1019] - Exception in removoke token when valid period > 2^31-1
  • [APIMANAGER-1021] - Cannot login to APIM apps as tenants
  • [APIMANAGER-1023] - When editing an existing API (with Visibility public), it still asks for "Visible to Roles"
  • [APIMANAGER-1024] - When editing existing API, null pointer exception is thrown.
  • [APIMANAGER-1025] - Registry locks occur when we publish the API
  • [APIMANAGER-1026] - API Icons are not loading in Publisher and Store for tensnts.
  • [APIMANAGER-1032] - Flaw in array iteration logic when retrieving publishes APIs' for all tenants
  • [APIMANAGER-1033] - Access Allowed Domains cannot be changed when application token is in 'never expired' state
  • [APIMANAGER-1034] - Recently Added APIs,not function properly in global store mode-with multi tenancy enabled
  • [APIMANAGER-1035] - API invocation fails
  • [APIMANAGER-1036] - Get Provider's APIs,not function properly in global store mode-with multi tenancy enabled
  • [APIMANAGER-1037] - API Store doesn't show Tags of the APIs created by tenant users
  • [APIMANAGER-1038] - The names of tenant specific API providers are shown with '-AT-',instead '@' in APIM apps
  • [APIMANAGER-1039] - Samples are broken in APIM 1.4.0
  • [APIMANAGER-1042] - REST POST fro SOAP requests fail
  • [APIMANAGER-1043] - If a request fails due to restricted domain,backend does not give a proper error message when using WSClient for keyvalidation
  • [APIMANAGER-1049] - Created documents are not showing when tenant logged in to Store
  • [APIMANAGER-1051] - Default 'subscriber' role,doesn't create in each tenant space,who are using the APIStore
  • [APIMANAGER-1053] - When editing an api from publisher and give "auth type" to "application & application user" and save, it is changed back to "application" or "none"
  • [APIMANAGER-1054] - Cannot change the theme as 'dark' in APIStore
  • [APIMANAGER-1055] - APIM statistics dashboard drilling down section shows NaN-NaN-NaN.
  • [APIMANAGER-1056] - Error while browsing APIs when tenant logged in to Store
  • [APIMANAGER-1057] - APIs are not displaying properly according to assigned visibility permissions in normal users mode
  • [APIMANAGER-1058] - If the allow domains are not defined, the Allow Domains field will be empty, it will be better to pre-filled it with 'ALL'
  • [APIMANAGER-1059] - APIM MySQL script fails when the database charactor encoding type set to UTF-8
  • [APIMANAGER-1060] - API Store Try-Me points to Store Home Page.
  • [APIMANAGER-1061] - OPTIONS method not working for Tenant APIs
  • [APIMANAGER-1062] - When editing tenant APIs,context value is changing incorrectly
  • [APIMANAGER-1063] - API Store - Search API throws NPE
  • [APIMANAGER-1064] - API Publisher Search API not working
  • [APIMANAGER-1065] - Revoke Token Fails for tenants
  • [APIMANAGER-1067] - Error when getting tags/recently added APIs in tenant mode,when a tenant exists without doing API managing operations
  • [APIMANAGER-1069] - Cannot download docs with file-format in tenant mode
  • [APIMANAGER-1070] - Default sequences for a Managed API are not deploying into the tenant space
  • [APIMANAGER-1071] - Allowing different tenant users to comment on an API in global APIStore
  • [APIMANAGER-1074] - Allowing different tenant users to rate on an API in global APIStore
  • [APIMANAGER-1075] - Restricted APIs defined without roles are not shown to all the users of the rlevant domain
  • [APIMANAGER-1077] - Loading Restricted APIs in Store displays authentication required popup for registry resources
  • [APIMANAGER-1078] - Error when running oracle.sql scrip found in <APIM_HOME>/dbscripts/apimgt/
  • [APIMANAGER-1079] - API Store Ratings - Your rating is not shown correctly
  • [APIMANAGER-1080] - APIs not shown to tenants who are allowed to view controlled APIs
  • [APIMANAGER-1081] - [MT mode] [usability issue] For a first time/new user it's not straightforward to figure out whether he's accessing his own store or global store
  • [APIMANAGER-1082] - [MT mode - controlled API] Even after subscribing to an API, that particular application is still available in application list and the tenant is again allowed to subscirbe to the API selecting that application
  • [APIMANAGER-1083] - [MT mode - api store] More APIs from the tenant is not shown when you veiw an API
  • [APIMANAGER-1084] - A Tenant's Public APIs are hidden from super tenant users
  • [APIMANAGER-1085] - [MT mode] Unblock subscription does not work
  • [APIMANAGER-1087] - When you try to add a new resource during editing an API, once you try to move up and down using Action and try to save, it will go to a blank page
  • [APIMANAGER-1088] - Dead page when login to AM management console as a tenant
  • [APIMANAGER-1090] - [MT mode] Error when removing an API having comments
  • [APIMANAGER-1091] - the subscriber has to refresh the page with F5 key to see the keys generated for an API after the generate action is performed
  • [APIMANAGER-1092] - Published API which is created using a tenant, is not visible when a user logged in to the store
  • [APIMANAGER-1093] - Error when login to API store
  • [APIMANAGER-1094] - Remove rating in API Store does not work
  • [APIMANAGER-1095] - the system does not allow the user to create an API without an icon if the user has already selected an icon and decides to proceed without an icon
  • [APIMANAGER-1096] - Eventhough the session is timed out in publisher, it shows the loged in user
  • [APIMANAGER-1098] - When the HTTP Verb "OPTIONS" 's Auth Type is NOT selected as "None", API cannot be invoked passing header values using Swagger
  • [APIMANAGER-1099] - [MT mode] Tags added by super tenant user is shown only before login to store
  • [APIMANAGER-1100] - [MT mode] Tags added by tenats are not shown in store
  • [APIMANAGER-1102] - When the HTTP Verb "OPTIONS" 's Auth Type is updated as "None", still API cannot be invoked passing header values using Swagger
  • [APIMANAGER-1104] - [MT mode] When api provider is super tenant, no results are returned for search by API provider option (for other tenants)
  • [APIMANAGER-1106] - the attached exception is thrown when the user attempts to subscribe to a new app of a new API
  • [APIMANAGER-1109] - When a user provides the same application, the error message is given as Error occurred while executing the action addApplication
  • [APIMANAGER-1111] - the BAM based monitoring wiki page is not available as directed from the API Publisher
  • [APIMANAGER-1114] - [Distributed Setup] Public API created by a tenant will not be visible in the API store when a user is not logged in
  • [APIMANAGER-1115] - Offset setting in Carbon.xml does not work for Thrift ports.
  • [APIMANAGER-1116] - [MT mode - distributed setup] Error when publishing the first API of a tenant
  • [APIMANAGER-1117] - [MT mode - distributed setup] Error when viewing a documentation of a public API crated by tenant user
  • [APIMANAGER-1118] - [MT mode - distributed setup] Error when "File" is selected as document source
  • [APIMANAGER-1119] - /* is displayed and the link is not clickable in the header
  • [APIMANAGER-1120] - [MT mode] NPE thrown when clicking "Public API store" and go to "tenant's API store"
  • [APIMANAGER-1121] - It is better to display life cycle history entry when the API status is changed through the carbon registry
  • [APIMANAGER-1122] - NPE is thrown when creating or updating APIs in Publisher
  • [APIMANAGER-1123] - Issues if version is a combination of numbers and characters
  • [APIMANAGER-1124] - User who has permission to create API, can go to the create API page and enter values, but exception thrown when saving.
  • [APIMANAGER-1125] - [MT mode] Error when copying an API with image
  • [APIMANAGER-1126] - [MT mode] Continuous error and server has to be restarted if wrong wsdl is mentioned while creating API
  • [APIMANAGER-1127] - [MT mode] Users from removed roles can view restricted APIs
  • [APIMANAGER-1128] - [MT mode] Anonymous users can view controlled APIs through tags
  • [APIMANAGER-1129] - Eventhough the visibility is controlled for a paticular tenant, still the other users can see the API and access it via the tag given
  • [APIMANAGER-1130] - Tenant URL is not secured
  • [APIMANAGER-1131] - Tags work only for 1 API at a time
  • [APIMANAGER-1132] - "/* Links to Access Tenant Store and Public Store*/" appears in API store UI all the time even you logged in or not
  • [APIMANAGER-1133] - Trying to get user token for published api fails with an error message
  • [APIMANAGER-1134] - uri-template should support /* notation
  • [APIMANAGER-1135] - Test URI returns "invalid" for valid https endpoints
  • [APIMANAGER-1137] - Revoke access token doesn't work
  • [APIMANAGER-1140] - Regenerate key hyperlink missing in the "SandBox" area of the store.
  • [APIMANAGER-1142] - Error when a user tries to login to publisher after session times out
  • [APIMANAGER-1143] - Copy API throws an exception
  • [APIMANAGER-1145] - Left menu names are gone horizontal, in IE 10
  • [APIMANAGER-1147] - Gets a 404 error for /oauth2endpoints service
  • [APIMANAGER-1148] - JSPException while including path '/tenant-dashboard/index.jsp'
  • [APIMANAGER-1149] - Requests comes with and without "/" at the end should pointed to same resource
  • [APIMANAGER-1150] - Issues when description contains <
  • [APIMANAGER-1151] - Error when try to view RESTclient
  • [APIMANAGER-1152] - Recently added APIs not listed when logged in as super-admin.
  • [APIMANAGER-1154] - [UI] API details are not shown in IE 10, when you browse the API
  • [APIMANAGER-1155] - [Store] remove 'Rest Client' from Tools menu since we have deprecated it
  • [APIMANAGER-1156] - Subscriptions details list is incorrect
  • [APIMANAGER-1157] - Controlled by a tenant option is not available in visibility options when you login as a Admin and try to create an API in publisher
  • [APIMANAGER-1158] - [store] Tenant only APIs are shown in More APIs from Publisher list when there are public APIs created by the same publisher
  • [APIMANAGER-1159] - APIs visible to only a specific role are shown to other roles also
  • [APIMANAGER-1160] - [store] Tenant only APIs are shown when you search APIs with publisher name, without logging in
  • [APIMANAGER-1161] - [store] Login screen does not show up in IE10
  • [APIMANAGER-1162] - Subscribed APIs list is repeated twice
  • [APIMANAGER-1163] - Subscriptions Actions Block/Unblock functionality does not work
  • [APIMANAGER-1164] - Search Functionality in Store does not work properly for the APIs controlled for a paticlular tenant
  • [APIMANAGER-1165] - Tags font is inconsistent
  • [APIMANAGER-1166] - When a user who belong to a different tenant logout from the store and try to login form a different tenant login, it does not allow
  • [APIMANAGER-1167] - Carbon Admin created APIs are visible when you click on the Go to <Tenants>'s API Store
  • [APIMANAGER-1168] - [store] Tenant Restricted APIs can be viewed by changing the tenant name in URL parameters in tenant specific store
  • [APIMANAGER-1169] - [store] Tenant Restricted APIs can be viewed at recently added api section by changing the tenant name in URL parameters in tenant specific store
  • [APIMANAGER-1170] - Only the Carbon admin created APIs will be visible in the store when you click on the tag,for some tags when we provide the same tag name for several APIs created by different users
  • [APIMANAGER-1172] - User cannot subscribe to an application. It popups an error notification saying "Please select an application before subscribing"
  • [APIMANAGER-1173] - If we give '/t/something' in the API context in tenant APIs then it will give 404 error when API is invoked
  • [APIMANAGER-1174] - 404 error when Tenant APIs are invoked in Pass Through Transport mode
  • [APIMANAGER-1175] - Hot Update and Hot deployment doesn't happen - in both Windows and Linux
  • [APIMANAGER-1176] - First subscription time stamp is shown everytime for a paticular user when subscribe for different APIs with different applications
  • [APIMANAGER-1177] - Only Firstly subscribed API details will be displayed always in the Subscription list. Other subscription information go missing
  • [APIMANAGER-1178] - Changes for description done in API Definition are not shown in store
  • [APIMANAGER-1179] - When a user manually types the tenant store address and search for a paticular tenant controlled API, it will be visible in the results.
  • [APIMANAGER-1180] - [MT mode] Public APIs are only shown in public api store of the tenant, but the tags related to public apis are shown in tenant's store too
  • [APIMANAGER-1183] - Cannot configure access token expiration time
  • [APIMANAGER-1184] - "Token created time" value is not the local time of the server
  • [APIMANAGER-1185] - If self sign up is disabled, it's better if sign-up option is made unclickable in store
  • [APIMANAGER-1187] - Ratings are not correctly shown in apis listed under MORE APIS FROM'creator'
  • [APIMANAGER-1188] - API Response Times are not shown
  • [APIMANAGER-1189] - Overall rating value is incorrect
  • [APIMANAGER-1190] - Documents of an API created by a tenant are not shown to super admin
  • [APIMANAGER-1191] - Comment posted time is different from local time of server
  • [APIMANAGER-1192] - [MT mode]Tags list only one version when DisplayMultipleVersions is set to true
  • [APIMANAGER-1193] - Cannot setup SSO by following the docs - needs to update
  • [APIMANAGER-1194] - SSO is not working for tenant log in
  • [APIMANAGER-1195] - Go to <User> Store is repeated when you click on the ? mark
  • [APIMANAGER-1196] - Failed to remove the API from : /apimgt/applicationdata/provider/<tenant user>.com/TestAPI2/1.0.0 is displayed when you try to remove an API
  • [APIMANAGER-1197] - User created docs are not getting deleted eventhough you click on Delete confirmation Yes button or refresh after it
  • [APIMANAGER-1198] - Edit Content functionality in API docs section's Apply button does not work as it is expected
  • [APIMANAGER-1199] - Some documents are not visible for some APIs when you are not logged in
  • [APIMANAGER-1200] - Number of subscribed users are wrong for a paticular API when you search for it in publisher
  • [APIMANAGER-1201] - [With offset] Error when invoking API manager login API to generate user tokens
  • [APIMANAGER-1202] - Clear button besides "Choose file for Icon" is unresponsive
  • [APIMANAGER-1203] - Cannot delete documents
  • [APIMANAGER-1204] - API creator is not allowed to delete the API from publisher if there are active subscriptions
  • [APIMANAGER-1205] - Cross domains tenant only does not work as expected for the publisher domain
  • [APIMANAGER-1206] - Settings, select a theme window is not aligned properly
  • [APIMANAGER-1207] - Alignment issues in Dark and Modern themes in store
  • [APIMANAGER-1208] - Restricted by Roles functionality does not work for the roles in the same domain
  • [APIMANAGER-1209] - Restricted by Roles functionality does not work as expected for the roles in the different domains
  • [APIMANAGER-1211] - A configuration step in billing sample readme is misleading

All resolved issues

Key Features of WSO2 API Manager

Following is a categorization of the core features supported by WSO2 API Manager based on the target user group.

  • API Publisher:
    • Publish APIs to external consumers and partners, as well as internal users; SOAP and REST services are supported
    • Manage API versions (several versions can be deployed in parallel)
    • Govern the API lifecycle (publish, deprecate, retire)
    • Attach documentation (files, external URLs) to APIs
    • Apply Security policies to APIs (authentication, authorization)
    • Attach SLAs
    • Provision and Manage API keys
    • Track consumers per API
    • Monitor API usage and performance, SLA compliance
    • Gather consumers requirements
  • API Consumers:
    • Find useful APIs by browsing or searching through the API Store: view top rated, top used and featured APIs
    • Explore API documentation and ask questions to publisher
    • Register applications and obtain API keys
    • Subscribe to API changes and receive news
    • Evaluate APIs, rate APIs, and share comments
    • Request features and improvements from publishers
    • Participate in online forums
    • OAuth2 support for API access

Known Issues

All the open issues pertaining to WSO2 API Manager are reported at the following location:

How You Can Contribute

Mailing Lists

Join our mailing list and correspond with the developers directly.

Reporting Issues

We encourage you to report issues, documentation faults and feature requests regarding WSO2 API Manager through the publicAPI Manager JIRA. You can use the Carbon JIRA to report any issues related to the Carbon base framework or associated Carbon components.

Support

We are committed to ensuring that your enterprise middleware deployment is completely supported from evaluation to production. Our unique approach ensures that all support leverages our open development methodology and is provided by the very same engineers who build the technology.

For more details and to take advantage of this unique opportunity please visithttp://wso2.com/support.

To learn more about WSO2 API Manager and WSO2 support offerings please visit http://wso2.com/products/api-manager.

-- The WSO2 API Manager Team --