In this chapter, we learned how to work with security of the services in two different roles: one to consume secure backend services over basic, OAuth, and WS-Security authentication, and the other to expose our services with security and not be available to all the users. In that way, we created a certificate and configured our server to use for the HTTPS communication over SSL/TLS to provide more security in the transport layer, and go deep in setting up the APIs and Proxies. One important thing is to have all the scenarios that WSO2 provides us with to configure the services clearly, because we will need to use one of them based on our requirement.
In this chapter, we introduced the throttle mediator that allows us to create complex policies based on IP addresses and domains, and we can set up the maximum number of requests that can be performed in a specific unit time...
