APIMAN dynamic endpoint/token based security

[AghaSaad04]

TestURL:
https://testAPI/v3/catalog/products/${​​​id}​​​

Can anybody help me how can we dynamically change the end point like we need to replace the id value that is coming in request header value? Moreover, can we change the Endpoint API security to token based security?

[msavy]

Can anybody help me how can we dynamically change the end point like we need to replace the id value that is coming in request header value?

What have you tried so far? I don't quite understand what you are trying to say, unfortunately.

Did you look at the URL Rewriting Policy? You can use a header as a source of data for rewriting.

If there's nothing from the plugins or in-built policies then you need to write your own policy.

You may need to combine multiple plugins together.

https://www.apiman.io/apiman-docs/core/2.1.0.Final/development/Plugins.html

Moreover, can we change the Endpoint API security to token based security?

You can extract any field from a JWT token using the Keycloak OAuth2 plugin policy 👍. Look at the 'Forward Keycloak Token Information'. You might be able to put this policy at the front of the policy chain and then insert the extracted value into your URL using the rewriting policy or similar.