Oracle® Fusion Middleware
Part 1. Getting Started

Oracle API Gateway Explorer enables developers to test the performance, scalability, and security of enterprise services. Using API Gateway Explorer, developers can test how services perform under load, how they deal with unexpected input, and what their traffic ceiling is.

API Gateway Explorer can automatically generate request messages from the service interfaces defined in WSDL files. Requests can then be signed and encrypted using XML Signature and XML Encryption before being sent to a target system. Traditional security technologies such as SSL and HTTP authentication are also supported, as well as next-generation security paradigms such as WS-Security and SAML.

Using WSDL files in this manner, you can create test suites for each service defined in the WSDL, where each suite comprises several test cases. Test cases can then be run in parallel to stress test a target service.

The following sections describe some of the high-level functionality available in Oracle API Gateway Explorer.

How do your services perform under stress? What are your Web Service's traffic ceilings? What happens when they receive more traffic than they can cope with? API Gateway Explorer answers these questions with comprehensive services stress testing.

Use API Gateway Explorer to create and run your own battery of tests against internal application servers and Enterprise Service Bus (ESB) platforms.

Get started quickly with pre-built SOAP messages provided as standard.

API Gateway Explorer can create signed and encrypted XML messages without any requirement for coding. It supports SSL, WS-Security, XML Signature, XML Encryption, and SAML.

API Gateway Explorer creates SAML authentication and authorization assertions to test them against federated identity infrastructures. Creating SAML assertions using API Gateway Explorer is significantly more simple than using a programming toolkit for the same purpose.

Non-SOAP services can also be tested using API Gateway Explorer. In addition, services that are only called directly by browsers (for example, REST services) can also be tested using API Gateway Explorer.

You can use API Gateway Explorer to attach SOAP attachments to SOAP messages, simply and easily.

Encryption key management is difficult using programming toolkits. API Gateway Explorer turns key management into a point-and-click task using a graphical keystore. Users can load multiple keys and certificates without using command-line tools. With the keystore, you can encrypt XML for multiple recipients in one simple step.

Automatically remove WS-Security tokens from messages so that you can quickly and simply move on to your next test.

API Gateway Explorer includes all the varieties of transfer encoding used by Web services platforms.

In a SOA Governance environment, API Gateway Explorer enables policies to be tested and refined at design time, before they are deployed. This enables a virtual circle of service definition, policy definition, policy testing, and policy refinement.