How can we improve Azure API Management?

← API Management

Client certificate authentication in developer console

If the front-end takes mutual certs, the console cannot provide a way for developers to test API.

47 votes
Vote
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
You have left! (?) (thinking…)
Anton Babadjanov shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

3 comments

Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Jan Aagaard commented  ·   ·  Flag as inappropriate

    > Proper solution is to allow you to configure a per API certificate for the console to implicitly use when calling those APIs.

    Wouldn't this be a security issue, since the portal could then be used to access the API without possessing a certificate?

  • Michel van den Berg commented  ·   ·  Flag as inappropriate

    We are using API Management with the new mutual TLS support. We check each client certificate thumbprint using conditions. However, this renders the try-out feature unusable, since it doesn't send a client certificate.

    Proper solution is to allow you to configure a per API certificate for the console to implicitly use when calling those APIs.

API Management: Developer portal

Categories

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice