Developer Portal
A developer portal makes discovery and access workable, including automatic low-risk paths and explicit review for sensitive operations.
-
-
API Gateway
A gateway checks that the token is valid and the quota is not spent. Which invoices belong to whom is a question its backend should answer.
-
API Management and Service Delivery
A gateway can validate credentials and enforce shared policies. Services still need authorization tied to their data and current business state.