API Gateway
A gateway checks that the token is valid and the quota is not spent. Which invoices belong to whom is a question its backend should answer.
-
-
API Management and Service Delivery
A gateway can validate credentials and enforce shared policies. Services still need authorization tied to their data and current business state.