tyk_demo.postman_collection.json

{
	"info": {
		"_postman_id": "47441dfa-69a6-4c47-afe6-5a3e3e0b4590",
		"name": "Tyk Demo",
		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
	},
	"item": [
		{
			"name": "API Definition",
			"item": [
				{
					"name": "Middleware",
					"item": [
						{
							"name": "Middleware - JavaScript",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "bd7e1f22-3680-4f89-9ca3-4087e889ea96",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Body data is set by middleware\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.data).to.eql(\"Request body set by pre middleware\");",
											"});",
											"",
											"pm.test(\"'added' URL parameter is added by middleware \", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.args.added).to.eql(\"123\");",
											"});",
											"",
											"pm.test(\"'Config-Data' header is added by middleware\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers['Config-Data']).to.eql(\"config-value\");",
											"});",
											"",
											"pm.test(\"'Accepted' header is unchanged by middleware\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers['Accepted']).to.eql(\"789\");",
											"});",
											"",
											"pm.test(\"Request is redirected by middleware\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.url).to.contain(\"/anything/post\");",
											"});",
											"",
											"pm.test(\"'Deleted' header is deleted by middleware\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers['Deleted']).to.eql(undefined);",
											"});",
											"",
											"pm.test(\"'User-Agent' header is set by middleware\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers['User-Agent']).to.eql(\"Tyk-JavaScript-Middleware\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "POST",
								"header": [
									{
										"key": "Deleted",
										"value": "deleted value",
										"type": "text"
									},
									{
										"key": "Accepted",
										"value": "789",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/javascript-middleware-api/post?deleted=deleted-value&accepted=456",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"javascript-middleware-api",
										"post"
									],
									"query": [
										{
											"key": "deleted",
											"value": "deleted-value"
										},
										{
											"key": "accepted",
											"value": "456"
										}
									]
								},
								"description": "Calls the `JavaScript Middleware API`, which executes two JavaScript middleware functions at the `pre` and `post` hooks.\n\nThe `pre` function does the following:\n- Writes to the API Gateway application log\n- Adds `User-Agent` header\n- Deletes `Deleted` header\n- Adds `added` URL parameter\n- Deletes `deleted` URL parameter\n- Changes the request body - see `data` property of response object\n- Changes the requested URL - see `url` property of response object\n\nThe `post` function does the following:\n- Writes to the API Gateway application log\n- Adds `config-data` header using value taken from API definition `config data`"
							},
							"response": []
						}
					],
					"protocolProfileBehavior": {},
					"_postman_isSubFolder": true
				},
				{
					"name": "Endpoint Designer",
					"item": [
						{
							"name": "Plugin - Mock Response",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "84923368-e448-4a4c-b34b-97a905e46866",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Mock response data is returned\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.mock).to.eql(\"response\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "x-api-version",
										"value": "Default",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/mock",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"mock"
									]
								},
								"description": "This request uses the `Mock Response` Endpoint Designer plugin to return a response directly from the Gateway when the API endpoint is called.\n\nThe mock response lets you define the headers and body of the response, as well as the HTTP status code returned. In this example the mock response is configured as follows:\n- Headers: Add a `Mock` header\n- Body: Add a basic JSON object as the body\n- HTTP status code: `200 OK`\n\nWhen the Mock Response is executed, the request does not reach the API Server, as the Gateway provides the response directly to the API Client."
							},
							"response": []
						},
						{
							"name": "Plugin - Blacklist",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "0b1dec21-146f-4125-b81d-8313d0bbbb31",
										"exec": [
											"pm.test(\"Status code is 403\", function () {",
											"    pm.response.to.have.status(403);",
											"});",
											"",
											"pm.test(\"Error message is 'Requested endpoint is forbidden'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.error).to.eql(\"Requested endpoint is forbidden\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/blacklist",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"blacklist"
									]
								},
								"description": "The Blacklist plugin blocks requests, returning a `403 Forbidden` response."
							},
							"response": []
						},
						{
							"name": "Plugin - Circuit Breaker",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "0511586b-396e-441b-869a-f0a05ce635f4",
										"exec": [
											"pm.test(\"5th server error response triggers circuit breaker\", function () {",
											"    var circuitBreakerRequest = {",
											"      url: 'http://localhost:8080/plugin-demo-api/status/500',",
											"      method: 'GET'",
											"    };",
											"    ",
											"    pm.sendRequest(circuitBreakerRequest, function (err, response) {",
											"        pm.response.to.have.status(500);",
											"",
											"        pm.sendRequest(circuitBreakerRequest, function (err, response) {",
											"            pm.response.to.have.status(500);",
											"            ",
											"            pm.sendRequest(circuitBreakerRequest, function (err, response) {",
											"                pm.response.to.have.status(500);",
											"                ",
											"                pm.sendRequest(circuitBreakerRequest, function (err, response) {",
											"                    pm.response.to.have.status(500);",
											"",
											"                    pm.sendRequest(circuitBreakerRequest, function (err, response) {",
											"                        pm.response.to.have.status(500);",
											"                    });",
											"                });",
											"            });",
											"        });",
											"    });",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/status/500",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"status",
										"500"
									]
								},
								"description": "The Circuit Breaker can protect API servers by blocking requests for endpoints which are consistently returning errors.\n\nThe plugin monitors the responses from the API server for errors. If the API server returns over a certain number of errors over a particular number of requests then the API Gateway will stop proxing requests to it for a number of seconds. When the circuit breaker is activated, the API Gateway returns a `503 Service Unavailable` response.\n\nIn this example, the endpoint called by this request always returns `500 Server Error` responses, so will easily trigger the circuit breaker. The circuit breaker has been set up to sample 4 requests, and if over 50% of them result in errors then the circuit breaker will be active for 15 seconds."
							},
							"response": []
						},
						{
							"name": "Plugin - Body Transform",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "6bf2f11f-bd1e-4728-ae87-9e13f1e9d421",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Body data transformed to JSON\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.json[\"Beijing_VPN\"]).to.eql(\"127.0.0.2\");",
											"    pm.expect(jsonData.json[\"Shanghai_VPN\"]).to.eql(\"127.0.0.1\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "POST",
								"header": [],
								"body": {
									"mode": "raw",
									"raw": "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<servers version=\"1\">\n  <server>\n    <serverName>Shanghai_VPN</serverName>\n    <serverIP>127.0.0.1</serverIP>\n  </server>\n  <server>\n    <serverName>Beijing_VPN</serverName>\n    <serverIP>127.0.0.2</serverIP>\n  </server>\n</servers>"
								},
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/body-transform",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"body-transform"
									]
								},
								"description": "The Body Transform plugin can transform data in XML and JSON formats using templates. The output format can be anything, it depends entirely on the template. Transforms can be applied to both requests and responses.\n\nThis example applies a transform on the request, changing it from XML to JSON. You can see the request body is an XML document, but the response shows that the API server receive the data as JSON - you can verify this by checking the `data` and `json` properties of the response body."
							},
							"response": []
						},
						{
							"name": "Plugin - Enforced Timeout (part 1)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "c5bbb502-12c9-4ad6-aff8-da16b20e2708",
										"exec": [
											"pm.test(\"Status code is 504\", function () {",
											"    pm.response.to.have.status(504);",
											"});",
											"",
											"pm.test(\"Response time is more than 3 seconds\", function () {",
											"    pm.expect(pm.response.responseTime).to.be.above(3000);",
											"});",
											"",
											"pm.test(\"Response time is less than 6 seconds\", function () {",
											"    pm.expect(pm.response.responseTime).to.be.below(6000);",
											"});",
											"",
											"pm.test(\"Error message is 'Upstream service reached hard timeout.'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.error).to.eql(\"Upstream service reached hard timeout.\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/delay/6",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"delay",
										"6"
									]
								},
								"description": "The Enforced Timeout plugin will return an error response from the Gateway if the API server does not respond within a set time. \n\nThis request calls the `/delay/6` endpoint, which has a 6 second delay before responding. The endpoint uses the Enforced Timeout plugin, which is configured for 4 seconds, so will repsond with a `504 Gateway Timeout` before the API server can provide a response."
							},
							"response": []
						},
						{
							"name": "Plugin - Enforced Timeout (part 2)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "1e28bb3e-08d5-4bb1-b9fe-feb041fe15cc",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Response time is more than 1 second\", function () {",
											"    pm.expect(pm.response.responseTime).to.be.above(1000);",
											"});",
											"",
											"pm.test(\"Response time is less than 3 seconds\", function () {",
											"    pm.expect(pm.response.responseTime).to.be.below(3000);",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/delay/1",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"delay",
										"1"
									]
								},
								"description": "This endpoint has the same configuration at part 1, but because this endpoint only has a 1 second delay, it responds in time, so the API client receives the API server response and the Enforced Timeout is not activated."
							},
							"response": []
						},
						{
							"name": "Plugin - URL Rewrite (part 1)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "905f35b8-e6d4-4dbb-9ac2-92ae685d54ea",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"URL rewritten to '/anything/default-rewrite'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.url).to.contain(\"/anything/default-rewrite\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/url-rewrite",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"url-rewrite"
									]
								},
								"description": "The URL Rewrite plugin can rewrite the URL based on many different parameters. This example shows the most basic version, using the default rewrite, which is used if none of the advanced rewrite rules are triggered. In this case, it rewrites to `/anything/default-rewrite` - check the `url` property in the response body to see the URL which was called on the API server.\n\nThe advanced rewriter can perform rewriting based on many aspects of a request:\n\n- URL query\n- Header\n- Path\n- Body\n- Session metadata\n- Context data\n\nSee the other parts of the URL Rewrite example for examples of the advanced URL rewriting rules."
							},
							"response": []
						},
						{
							"name": "Plugin - URL Rewrite (part 2)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "8f522a28-7226-481c-81a8-c0a168799ea8",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"URL rewritten to '/anything/rewrite-query'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.url).to.contain(\"/anything/rewrite-query\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/url-rewrite?query=rewrite",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"url-rewrite"
									],
									"query": [
										{
											"key": "query",
											"value": "rewrite"
										}
									]
								},
								"description": "This example triggers an advanced URL rewrite rule based on the URL parameter. It checks for a parameter with the key `query` and value `rewrite`. The plugin rewrites to the URL `/anything/rewrite-query`."
							},
							"response": []
						},
						{
							"name": "Plugin - URL Rewrite (part 3)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "44fbc060-6baf-4acd-b4f1-4d56f42e60a0",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"URL rewritten to '/anything/rewrite-header'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.url).to.contain(\"/anything/rewrite-header\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "Header",
										"value": "rewrite",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/url-rewrite",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"url-rewrite"
									]
								},
								"description": "This example triggers an advanced URL rewrite rule based on the request headers. It checks for a header with the key `Header` and value `rewrite`. The plugin rewrites to the URL `/anything/rewrite-header`."
							},
							"response": []
						},
						{
							"name": "Plugin - Modify Headers",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "138af158-72a6-4e2e-8e2f-3bbc93237dff",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"'New-Header' header is present\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers['New-Header']).to.eql(\"new-header-value\");",
											"});",
											"",
											"pm.test(\"'Delete-Header' header not present\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers['Delete-Header']).to.eql(undefined);",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "Delete-Header",
										"value": "deleted-header-value",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/modify-headers",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"modify-headers"
									]
								},
								"description": "This plugin can add and remove headers. In this example is adds a header called `New-Header` with the value `new-header-value`, and removes a header called `Delete-Header` which is sent in the request."
							},
							"response": []
						},
						{
							"name": "Plugin - Cache",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "f4bbd554-b792-43fe-8845-5c0a3180ba1a",
										"exec": [
											"var cacheRequest = {",
											"    url: 'http://localhost:8080/plugin-demo-api/uuid',",
											"    method: 'GET'",
											"};",
											"",
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Response is same across two requests\", function() {",
											"    var response1;",
											"    var response2;",
											"    pm.sendRequest(cacheRequest, function (err, response) {",
											"        response1 =pm.response.json().uuid;",
											"        ",
											"         pm.sendRequest(cacheRequest, function (err, response) {",
											"            response2 =pm.response.json().uuid;",
											"            pm.expect(response1).to.eql(response2);",
											"        });",
											"    });",
											"});",
											"",
											"pm.test(\"Cached response contains 'X-Tyk-Cached-Response' header set to '1'\", function() {",
											"    pm.sendRequest(cacheRequest, function (err, response) {",
											"         pm.sendRequest(cacheRequest, function (err, response) {",
											"            pm.expect(response.headers.get(\"X-Tyk-Cached-Response\")).to.eql(\"1\");",
											"        });",
											"    });",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "x-api-version",
										"type": "text",
										"value": "Default"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/uuid",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"uuid"
									]
								},
								"description": "This request uses the `Cache` Endpoint Designer plugin to return a cached response directly from the Gateway when the API endpoint is called.\n\n- Global Cache is enabled\n- Response from Upstream will be cached for 5 seconds\n\n\nWhen this API executed, the response from upstream API server will be cached and served for upto 5 seconds to the subsequest requests made to same Endpoint. If the Gateway returns a cached response then it will also a header `X-Tyk-Cached-Response` to the response with the value of `1`.\n\nThis plugin is defined in the Endpoint Designer of the API Definition. It is set to execute on requests for the `Default` version of the API only."
							},
							"response": []
						},
						{
							"name": "Plugin - Ignore (part 1)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "cf9faaa8-d793-4ac1-bb15-d05a2d68b308",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/basic-protected-api/anything/ignored",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"basic-protected-api",
										"anything",
										"ignored"
									]
								},
								"description": "This request uses the **Ignore** Endpoint Designer plugin to access a protected API without providing any credentials. This API is configured to require the Client to authenticate using a token, with only the `/anything/ignored` path using the **Ignore** plugin. All other paths require authentication - see part 2.\n\nThe **Ignore** plugin instructs the Gateway to ignore the authentication settings defined in the API Definition. This allows API Clients to access ignored endpoints without providing any credentials. By default the plugin is case-sensitive, but can be configured to be case-insensitive when matching the path.\n\nThis plugin is useful in scenarios where there is a particular endpoint on the API Server that you would like to provide unauthenticated access to while keeping other endpoints protected. An authentication endpoint is a good example, where the Gateway will allow unauthenticated Clients to authenticate via the ignored endpoint, but require authentication for all other endpoints."
							},
							"response": []
						},
						{
							"name": "Plugin - Ignore (part 2)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "d5adca40-9d4e-4072-9e4f-8c48173d344a",
										"exec": [
											"pm.test(\"Status code is 401\", function () {",
											"    pm.response.to.have.status(401);",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/basic-protected-api/anything/not-ignored",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"basic-protected-api",
										"anything",
										"not-ignored"
									]
								},
								"description": "This part of the **Ignore** Endpoint Designer plugin example shows that endpoints of this protected API cannot be accessed by authenticated clients.\n\nThe requested path `/anything/not-ignored` has no entry in the Endpoint Designer, so generates a `401 Unauthorized` response to unauthenticated clients."
							},
							"response": []
						},
						{
							"name": "Plugin - Validate JSON (part 1)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "22cd7a49-318b-4bb3-8dfb-864d1b3657f8",
										"exec": [
											"pm.test(\"Status code is 422\", function () {",
											"    pm.response.to.have.status(422);",
											"});",
											"",
											"pm.test(\"Error message is 'firstName: firstName is required'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.error).to.eql(\"firstName: firstName is required\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "POST",
								"header": [],
								"body": {
									"mode": "raw",
									"raw": "{\n\t\"lastName\": \"Hoskins\",\n\t\"age\": 71\n}"
								},
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/validate-json",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"validate-json"
									]
								},
								"description": "The Validate JSON plugin will validate the JSON in the request body against a JSON scheme defined in the plugin configuration. If the request fails validation then the API Gateway returns a `422 Unprocessable Entity` HTTP status and a detailed description of the problem in the response body.\n\nFor this example, the JSON sent in the request body did not include a `firstName` property, so the request is rejected with a response specifically referencing the missing property.\n\nFor reference, the JSON schema used in this example:\n\n```\n{\n  \"title\": \"Person\",\n  \"type\": \"object\",\n  \"properties\": {\n    \"firstName\": {\n      \"type\": \"string\"\n    },\n    \"lastName\": {\n      \"type\": \"string\"\n    },\n    \"age\": {\n      \"description\": \"Age in years\",\n      \"type\": \"integer\",\n      \"minimum\": 0\n    }\n  },\n  \"required\": [\"firstName\", \"lastName\"]\n}\n```"
							},
							"response": []
						},
						{
							"name": "Plugin - Validate JSON (part 2)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "bcd24369-a412-4b10-84bb-340e586ac511",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Valid JSON data sent\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.json.age).to.eql(71);",
											"    pm.expect(jsonData.json.firstName).to.eql(\"Bob\");",
											"    pm.expect(jsonData.json.lastName).to.eql(\"Hoskins\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "POST",
								"header": [],
								"body": {
									"mode": "raw",
									"raw": "{\n\t\"firstName\": \"Bob\",\n\t\"lastName\": \"Hoskins\",\n\t\"age\": 71\n}"
								},
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/validate-json",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"validate-json"
									]
								},
								"description": "This example sends a valid payload, so is accepted and a normal response is received from the API server."
							},
							"response": []
						},
						{
							"name": "Plugin - Request Size Limit (part 1)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "adb5f443-8afa-487d-b7e6-d95ab57c0e08",
										"exec": [
											"pm.test(\"Status code is 400\", function () {",
											"    pm.response.to.have.status(400);",
											"});",
											"",
											"pm.test(\"Error message is 'Request is too large'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.error).to.eql(\"Request is too large\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "POST",
								"header": [],
								"body": {
									"mode": "raw",
									"raw": "1234567890"
								},
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/request-size-limit",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"request-size-limit"
									]
								},
								"description": "The Request Size Limit Plugin validates the size of the request body against defined maximum size in byte.\n\nIn this example, the plugin is configured to only allow requests with a maximum payload size of 9 bytes. The request sends a body with 10 bytes, so is rejected with a `400 Bad Request` response."
							},
							"response": []
						},
						{
							"name": "Plugin - Request Size Limit (part 2)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "50caea29-d4c2-4c8f-8c6b-4fde1305f342",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Request body is 9 bytes\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.data).to.eql(\"123456789\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "POST",
								"header": [],
								"body": {
									"mode": "raw",
									"raw": "123456789"
								},
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/request-size-limit",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"request-size-limit"
									]
								},
								"description": "This example succeeds because the request is 9 bytes, which the same as the configured maximum value in the plugin."
							},
							"response": []
						},
						{
							"name": "Plugin - Method Transform",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "e7c74988-3893-4639-8ade-5e41804396a9",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Request method is changed to POST\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.method).to.eql(\"POST\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "PUT",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/method-transform",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"method-transform"
									]
								},
								"description": "The Method Transform plugin changes the HTTP method used in the request. In this example, it changes the PUT method to a POST. Check the `method` property in the response body to see the method used."
							},
							"response": []
						},
						{
							"name": "Plugin - Track Endpoint",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "9d623292-47bb-4486-813f-7c1274a852dc",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/track-endpoint",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"track-endpoint"
									]
								},
								"description": "The Track Endpoint plugin will record analytics about the number of times this individual endpoint has been requested. The analytics for this are visible in the Endpoint Popularity report in the Dashboard."
							},
							"response": []
						},
						{
							"name": "Plugin - Global Version Settings",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "d09b4394-551f-47fa-b951-4d59aa235de1",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"'Global-Add' header added to request\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers['Global-Add']).to.eql(\"global-value\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "global-delete",
										"value": "deleted-header",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/global-version-settings",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"global-version-settings"
									]
								},
								"description": "The Global Version Settings plugin are applied to all endpoints for the version of the API. This plugin allows you to delete and add headers to the request. \n\nFor this example, the plugin will delete the header `global-delete` and will add a header `global-add` with the value `global-value`. Check the response body and you will see the added header, but not the deleted header in the `headers` array.\n\nThis plugin has been configured for the `default` version of the Plugin Demo API, so you will it taking effect on any request using this API version."
							},
							"response": []
						},
						{
							"name": "Plugin - Virtual Endpoint",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "084e470f-b110-4d6b-b312-c94dfa46ec1f",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Content-Type is present and set to 'text/plain; charset=utf-8'\", function () {",
											"    pm.response.to.have.header(\"Content-Type\");",
											"    pm.response.to.be.header(\"Content-Type\", \"text/plain; charset=utf-8\")",
											"});",
											"",
											"pm.test(\"Response body is 'Virtual endpoint response body'\", function () {",
											"    pm.expect(pm.response.text()).to.include(\"Virtual endpoint response body\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/virtual-endpoint",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"virtual-endpoint"
									]
								},
								"description": "The Virtual Endpoint plugin executes JavaScript to generate a response. The JavaScript is defined in the plugin or provided in a file. The JavaScript has access to special Tyk helper functions which make performing certain tasks easy:\n\n- Generating a response\n- Writing to the application log\n- Making an HTTP request\n\nThe JavaScript is executed by a JavaScript virtual machine which runs within the Gateway. When the plugin is run it provide access to the request data, session data and API configuration data. The plugin can also make requests out to other services, allowing for orchestration across multiple upstream API servers.\n\nIn this example, the plugin simply returns a basic plain text response with a `200 OK` status code."
							},
							"response": []
						},
						{
							"name": "Plugin - Whitelist (part 1)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "7c2302b6-a13f-4132-b082-bafc56564752",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "x-api-version",
										"value": "whitelist",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/whitelist",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"whitelist"
									]
								},
								"description": "The Whitelist plugin causes the API Gateway to reject requests for any endpoints which are not explictly whitelisted. \n\nFor this example a separate version of the Plugin Demo API has been created, called `whitelist`, and it has a single endpoint defined `/anything/whitelist$`. The `$` at the end of the string is the regular expression character for 'end of the string', which if not used would mean that any paths which start `/anything/whitelist` i.e. `/anything/whitelist-123` would also be accepted."
							},
							"response": []
						},
						{
							"name": "Plugin - Whitelist (part 2)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "37ef5cce-b486-4266-80fd-bd9c982806ec",
										"exec": [
											"pm.test(\"Status code is 403\", function () {",
											"    pm.response.to.have.status(403);",
											"});",
											"",
											"pm.test(\"Error message is 'Requested endpoint is forbidden'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.error).to.eql(\"Requested endpoint is forbidden\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "x-api-version",
										"type": "text",
										"value": "whitelist"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/whitelist-123",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"whitelist-123"
									]
								},
								"description": "This request is rejected as the requested path `/anything/whitelist-123` has not been defined with the Whitelist plugin. The API Gateway responds with a `403 Forbidden` response."
							},
							"response": []
						}
					],
					"event": [
						{
							"listen": "prerequest",
							"script": {
								"id": "65396c3f-087e-48bf-8397-7786b6f94c11",
								"type": "text/javascript",
								"exec": [
									""
								]
							}
						},
						{
							"listen": "test",
							"script": {
								"id": "f870fe1f-df18-4441-91df-0fef0850bc3e",
								"type": "text/javascript",
								"exec": [
									""
								]
							}
						}
					],
					"protocolProfileBehavior": {},
					"_postman_isSubFolder": true
				},
				{
					"name": "Versioning",
					"item": [
						{
							"name": "Versioning (part 1) - Mock response",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "15e769b7-4219-4ef6-8810-f033079861ad",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Mock response body returned\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.mock).to.eql(\"response\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "x-api-version",
										"value": "Default",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/mock",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"mock"
									]
								},
								"description": "This request uses the `Mock Response` Endpoint Designer plugin to demonstrate versioning. It shows how the API Gateway can change behaviour based on the requested version of an API. Using API versioning allows you to redefine how the API Gateway will handle endpoint requests.\n\nThe API used here has two versions:\n- `Default`: the default version, used in this request, which returns a mock response directly from the Gateway\n- `2`: the second version, used in part 2, which returns a response from the API server\n\nBoth versions make a request to the same API and API endpoint. The versioning is controlled by the `x-api-version` header in the request, which the Gateway will check to decide how the handle the request."
							},
							"response": []
						},
						{
							"name": "Versioning (part 2) - Normal response",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "7ca771ca-edc7-4bdc-9fd5-297aced6cb3d",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Mock response body not returned\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.mock).not.eql(\"response\");",
											"});",
											"",
											"pm.test(\"Version 2 of the API was requested\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers[\"X-Api-Version\"]).to.eql(\"2\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "x-api-version",
										"type": "text",
										"value": "2"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/mock",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"mock"
									]
								},
								"description": "Part 2 of the versioning example. This request shows that when version `2` of the API is requested, the API Gateway proxies the request to the API server.\n\nThis request uses the same URL as part 1, but uses `2` as the value for the `x-api-version` request header."
							},
							"response": []
						},
						{
							"name": "Versioning (part 3) - Expired version",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "15b88e97-b6ba-4d41-8fe5-621e5083dda8",
										"exec": [
											"pm.test(\"Status code is 403\", function () {",
											"    pm.response.to.have.status(403);",
											"});",
											"",
											"pm.test(\"Error message is 'Api Version has expired, please check documentation or contact administrator'\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.error).to.eql(\"Api Version has expired, please check documentation or contact administrator\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "x-api-version",
										"type": "text",
										"value": "expired"
									}
								],
								"url": {
									"raw": "http://localhost:8080/plugin-demo-api/anything/mock",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"plugin-demo-api",
										"anything",
										"mock"
									]
								},
								"description": "This request shows that version can be expired. In this case a version called `expired` was created with an expiry date in the past. This means that requests for this version are rejected by the Gateway, with a message provided in the response body which says the version has expired."
							},
							"response": []
						}
					],
					"protocolProfileBehavior": {},
					"_postman_isSubFolder": true
				},
				{
					"name": "Advanced Options",
					"item": [
						{
							"name": "Webhooks",
							"item": [
								{
									"name": "Webhooks - Authentication Failure",
									"event": [
										{
											"listen": "test",
											"script": {
												"id": "77ad7f91-528b-428a-8b26-81ab8e10e18c",
												"exec": [
													"pm.test(\"Status code is 403\", function () {",
													"    pm.response.to.have.status(403);",
													"});",
													"",
													"// Add test to check if webhook fired"
												],
												"type": "text/javascript"
											}
										}
									],
									"request": {
										"method": "GET",
										"header": [
											{
												"key": "Authorization",
												"value": "auth-failure-key",
												"type": "text"
											}
										],
										"url": {
											"raw": "http://localhost:8080/basic-protected-api/get",
											"protocol": "http",
											"host": [
												"localhost"
											],
											"port": "8080",
											"path": [
												"basic-protected-api",
												"get"
											]
										},
										"description": "This example makes an unauthenticated request to the `Basic Protected API`. The API requires authentication so the request fails, as expected, with a `403 Forbidden` response.\n\nThe `Basic Protected API` is configured to use a webhook in the event of authentication failure. This webhook calls another API, passing information about the failed request. You can see this webhook call in the Dashboard analytics, it's made to the `Webhook Receiver` API, and will appear straight after this failed API request to `Basic Protected API`. In the analytics record, check the body of the request to see origin of the request and key which was used.\n\nWebhooks can be set up to handle lots of different types of events, such as rate limit exceeded, quota exceeded etc. They can also be configured with a cooldown time so that the events don't overload the API receiving the webhooks."
									},
									"response": []
								}
							],
							"protocolProfileBehavior": {},
							"_postman_isSubFolder": true
						},
						{
							"name": "Context Variables",
							"item": [
								{
									"name": "Context Variables - Correlation Id",
									"event": [
										{
											"listen": "test",
											"script": {
												"id": "932b9aa4-5534-40fe-be48-2d15bb0a7de1",
												"exec": [
													"pm.test(\"Status code is 200\", function () {",
													"    pm.response.to.have.status(200);",
													"});",
													"",
													"pm.test(\"'X-Req-Id' header is a UUID\", function () {",
													"    var jsonData = pm.response.json();",
													"    pm.expect(jsonData.headers[\"X-Req-Id\"]).to.match(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/);",
													"});"
												],
												"type": "text/javascript"
											}
										}
									],
									"request": {
										"method": "GET",
										"header": [],
										"url": {
											"raw": "http://localhost:8080/basic-open-api/get",
											"protocol": "http",
											"host": [
												"localhost"
											],
											"port": "8080",
											"path": [
												"basic-open-api",
												"get"
											]
										},
										"description": "Header `X-Req-Id` is injected by the Gateway, and can be seen in the response body. \n\nThe header value is a GUID representing the random id assigned to each request by the Gateway. It is configured using the Tyk context variable `$tyk_context.request_id`.\n\nThe value is accessible to various parts of the Tyk middleware chain, so can be used as a reference when processing requests."
									},
									"response": []
								}
							],
							"protocolProfileBehavior": {},
							"_postman_isSubFolder": true
						}
					],
					"protocolProfileBehavior": {},
					"_postman_isSubFolder": true
				},
				{
					"name": "Core Settings",
					"item": [
						{
							"name": "Authentication",
							"item": [
								{
									"name": "Authentication Token",
									"item": [
										{
											"name": "Token authorization - failure (part 1)",
											"event": [
												{
													"listen": "test",
													"script": {
														"id": "d77a576d-ebc0-4b73-951a-66f2d8c55664",
														"exec": [
															"pm.test(\"Status code is 401\", function () {",
															"    pm.response.to.have.status(401);",
															"});",
															"",
															"pm.test(\"Error message is 'Authorization field missing'\", function () {",
															"    var jsonData = pm.response.json();",
															"    pm.expect(jsonData.error).to.eql(\"Authorization field missing\");",
															"});"
														],
														"type": "text/javascript"
													}
												}
											],
											"request": {
												"method": "GET",
												"header": [
													{
														"key": "Authorization",
														"value": "",
														"type": "text"
													}
												],
												"url": {
													"raw": "http://localhost:8080/basic-protected-api/get",
													"protocol": "http",
													"host": [
														"localhost"
													],
													"port": "8080",
													"path": [
														"basic-protected-api",
														"get"
													]
												},
												"description": "This API will showcase the Token authorization feature of Tyk.\n\nAn key is not provided in the HTTP header field `Authorization`, resulting in am HTTP status code `401 Unauthorized` returned by the Gateway."
											},
											"response": []
										},
										{
											"name": "Token authorization - failure (part 2)",
											"event": [
												{
													"listen": "test",
													"script": {
														"id": "1c4f50d7-1f44-46cd-94ec-b09377182aa8",
														"exec": [
															"pm.test(\"Status code is 403\", function () {",
															"    pm.response.to.have.status(403);",
															"});",
															"",
															"pm.test(\"Error message is 'Access to this API has been disallowed'\", function () {",
															"    var jsonData = pm.response.json();",
															"    pm.expect(jsonData.error).to.eql(\"Access to this API has been disallowed\");",
															"});"
														],
														"type": "text/javascript"
													}
												}
											],
											"request": {
												"method": "GET",
												"header": [
													{
														"key": "Authorization",
														"type": "text",
														"value": "missing_key"
													}
												],
												"url": {
													"raw": "http://localhost:8080/basic-protected-api/get",
													"protocol": "http",
													"host": [
														"localhost"
													],
													"port": "8080",
													"path": [
														"basic-protected-api",
														"get"
													]
												},
												"description": "This request attempts to authenticate with a key which does not exist - `missing_key`.\n\nThis results in am HTTP status code `403 Forbidden` response from the Gateway."
											},
											"response": []
										},
										{
											"name": "Token authorization - success",
											"event": [
												{
													"listen": "test",
													"script": {
														"id": "f372b9ae-ad2b-4708-b97b-8ee0d77448f9",
														"exec": [
															"pm.test(\"Status code is 200\", function () {",
															"    pm.response.to.have.status(200);",
															"});",
															"",
															"pm.test(\"'auth_key' used in 'Authorization' header\", function () {",
															"    var jsonData = pm.response.json();",
															"    pm.expect(jsonData.headers['Authorization']).to.eql(\"auth_key\");",
															"});"
														],
														"type": "text/javascript"
													}
												}
											],
											"request": {
												"method": "GET",
												"header": [
													{
														"key": "Authorization",
														"value": "auth_key",
														"type": "text"
													}
												],
												"url": {
													"raw": "http://localhost:8080/basic-protected-api/get",
													"protocol": "http",
													"host": [
														"localhost"
													],
													"port": "8080",
													"path": [
														"basic-protected-api",
														"get"
													]
												},
												"description": "This API showcases the Token authorization feature of Tyk.\n\nThe key is sent in the HTTP header field `Authorization`. It has been authorized access to the `Basic Protected API`, so the request is accepted by the Gateway."
											},
											"response": []
										}
									],
									"event": [
										{
											"listen": "prerequest",
											"script": {
												"id": "fa420743-8071-43fb-8723-5f4b0e1cc246",
												"type": "text/javascript",
												"exec": [
													""
												]
											}
										},
										{
											"listen": "test",
											"script": {
												"id": "a86fc552-eca1-4f65-8c53-02497650394f",
												"type": "text/javascript",
												"exec": [
													""
												]
											}
										}
									],
									"protocolProfileBehavior": {},
									"_postman_isSubFolder": true
								},
								{
									"name": "JSON Web Token",
									"item": [
										{
											"name": "JWT - shared HMAC secret",
											"event": [
												{
													"listen": "test",
													"script": {
														"id": "cdb56af0-d9da-4485-8cd7-fcf7b313d849",
														"exec": [
															"pm.test(\"Status code is 200\", function () {",
															"    pm.response.to.have.status(200);",
															"});"
														],
														"type": "text/javascript"
													}
												}
											],
											"request": {
												"method": "GET",
												"header": [
													{
														"key": "Authorization",
														"value": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwicG9sIjoiNWVhZDcyOTU1NzU5NjEwMDAxODE4Njg4In0.8xOVZJM8Qi4XySrJRMZtaNkaq-Bw3am0gLHFKAHY5OQ",
														"type": "text"
													}
												],
												"url": {
													"raw": "http://localhost:8080/jwt-api/get",
													"protocol": "http",
													"host": [
														"localhost"
													],
													"port": "8080",
													"path": [
														"jwt-api",
														"get"
													]
												},
												"description": "This request uses JWT authentication using a shared HMAC secret. In this case, the secret is defined on the API definition, but it is also possible to define it separately, which allows multiple secrets to be used.\n\nThe JWT claims are processed as follows:\n\n* `sub`: This is the subject, and is used by Tyk as the identity of the API Client. Tyk creates a session based on the value provided here, which allows it to maintain state for the subject across multiple requests.\n* `pol`: This is the Id of the Policy to use, if the request is authenticated. If no Id is provided then the API Definition specifies a default Policy to use.\n\nFor reference, the payload of the JWT:\n\n```json\n{\n  \"sub\": \"1234567890\",\n  \"pol\": \"5ead72955759610001818688\"\n}\n```"
											},
											"response": []
										},
										{
											"name": "JWT - shared HMAC secret with claim (part 1)",
											"event": [
												{
													"listen": "test",
													"script": {
														"id": "915a9928-2913-44c3-bdb5-2304618a5074",
														"exec": [
															"pm.test(\"Status code is 200\", function () {",
															"    pm.response.to.have.status(200);",
															"});"
														],
														"type": "text/javascript"
													}
												}
											],
											"request": {
												"method": "GET",
												"header": [
													{
														"key": "Authorization",
														"type": "text",
														"value": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwicG9saWN5X2NsYWltIjoicmVzdHJpY3RlZCJ9.nqQNDkB6--bOY48D2G8PZQSwvZduAqVWUUWTpyA1dDU"
													}
												],
												"url": {
													"raw": "http://localhost:8080/jwt-api/anything/allowed-path",
													"protocol": "http",
													"host": [
														"localhost"
													],
													"port": "8080",
													"path": [
														"jwt-api",
														"anything",
														"allowed-path"
													]
												},
												"description": "This request uses a claim in the JWT to define the Policy to use. In this case, the API Definition is configured to inspect the `policy_claim` claim and match the value (`restricted`) against the list defined in the API Definition. \n\nIn this case, the claim matches against the `JWT Policy Restricted` Policy, which uses path-based permissions to only allow requests for `GET /anything/allowed-path`. Requests for other endpoints will be rejected - see part 2.\n\nFor reference, the payload of the JWT:\n\n```json\n{\n  \"sub\": \"1234567890\",\n  \"policy_claim\": \"restricted\"\n}\n```"
											},
											"response": []
										},
										{
											"name": "JWT - shared HMAC secret with claim (part 2)",
											"event": [
												{
													"listen": "test",
													"script": {
														"id": "79c99ac9-27e1-4eb3-a9b6-f85a3ae96e17",
														"exec": [
															"pm.test(\"Status code is 403\", function () {",
															"    pm.response.to.have.status(403);",
															"});",
															"",
															"pm.test(\"Error message is `Access to this resource has been disallowed`\", function () {",
															"    var jsonData = pm.response.json();",
															"    pm.expect(jsonData.error).to.eql(\"Access to this resource has been disallowed\");",
															"});"
														],
														"type": "text/javascript"
													}
												}
											],
											"request": {
												"method": "GET",
												"header": [
													{
														"key": "Authorization",
														"type": "text",
														"value": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwicG9saWN5X2NsYWltIjoicmVzdHJpY3RlZCJ9.nqQNDkB6--bOY48D2G8PZQSwvZduAqVWUUWTpyA1dDU"
													}
												],
												"url": {
													"raw": "http://localhost:8080/jwt-api/anything/restricted-path",
													"protocol": "http",
													"host": [
														"localhost"
													],
													"port": "8080",
													"path": [
														"jwt-api",
														"anything",
														"restricted-path"
													]
												},
												"description": "This request fails because it attempts to access an endpoint which is not listed in the path-based permissions defined in the Policy. The Gateway responds with a `403 Forbidden`."
											},
											"response": []
										}
									],
									"protocolProfileBehavior": {},
									"_postman_isSubFolder": true
								},
								{
									"name": "Basic Authentication",
									"item": [
										{
											"name": "Basic Authentication",
											"event": [
												{
													"listen": "test",
													"script": {
														"id": "ce79fc00-d5fe-4086-9d86-4ae4a7e7e55c",
														"exec": [
															"pm.test(\"Status code is 200\", function () {",
															"    pm.response.to.have.status(200);",
															"});"
														],
														"type": "text/javascript"
													}
												}
											],
											"request": {
												"method": "GET",
												"header": [
													{
														"key": "Authorization",
														"value": "Basic YmFzaWMtYXV0aC11c2VybmFtZTpiYXNpYy1hdXRoLXBhc3N3b3Jk",
														"type": "text"
													}
												],
												"url": {
													"raw": "http://localhost:8080/basic-authentication-api/get",
													"protocol": "http",
													"host": [
														"localhost"
													],
													"port": "8080",
													"path": [
														"basic-authentication-api",
														"get"
													]
												},
												"description": "This request uses basic authentication to access the Basic Authentication API. Basic authenticate is based on a username and password.\n\nThe request has an `Authorization` header which has a value comprised of a prefix `Basic` and a base64 encoded representation of the credentials. The value used is the username and password separated with a colon. In this case the username is `basic-auth-username` and the password is `basic-auth-password`, so this gives `basic-auth-username:basic-auth-password`, which is `YmFzaWMtYXV0aC11c2VybmFtZTpiYXNpYy1hdXRoLXBhc3N3b3Jk` when base64 encoded."
											},
											"response": []
										}
									],
									"protocolProfileBehavior": {},
									"_postman_isSubFolder": true
								}
							],
							"protocolProfileBehavior": {},
							"_postman_isSubFolder": true
						},
						{
							"name": "Rate Limit",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "718c86da-e2e4-4ec6-8aff-e110019ca0cc",
										"exec": [
											"var keyId = pm.variables.replaceIn('{{$randomUUID}}');",
											"",
											"var rateLimitTestKeyCreateRequest = {",
											"  url: 'http://localhost:8080/tyk/keys/' + keyId,",
											"  method: 'POST',",
											"  header: 'x-tyk-authorization:28d220fd77974a4facfb07dc1e49c2aa',",
											"  body: {",
											"      mode: 'raw',",
											"      raw: JSON.stringify({\"last_check\":0,\"allowance\":2,\"rate\":2,\"per\":5,\"throttle_interval\":-1,\"throttle_retry_limit\":-1,\"date_created\":\"2020-04-23T04:40:22.3984988Z\",\"expires\":0,\"quota_max\":-1,\"quota_renews\":1587616821,\"quota_remaining\":-1,\"quota_renewal_rate\":-1,\"access_rights\":{\"accbdd1b89e84ec97f4f16d4e3197d5c\":{\"api_name\":\"Basic Protected API\",\"api_id\":\"accbdd1b89e84ec97f4f16d4e3197d5c\",\"versions\":[\"Default\"],\"allowed_urls\":[],\"limit\":null,\"allowance_scope\":\"\"}},\"org_id\":\"5e9d9544a1dcd60001d0ed20\",\"oauth_client_id\":\"\",\"oauth_keys\":null,\"certificate\":\"\",\"basic_auth_data\":{\"user\":\"\",\"password\":\"\",\"hash_type\":\"\"},\"jwt_data\":{\"secret\":\"\"},\"hmac_enabled\":false,\"hmac_string\":\"\",\"is_inactive\":false,\"apply_policy_id\":\"\",\"apply_policies\":[],\"data_expires\":0,\"monitor\":{\"trigger_limits\":null},\"enable_detail_recording\":false,\"meta_data\":{},\"tags\":[],\"alias\":\"\",\"last_updated\":\"1587616822\",\"id_extractor_deadline\":0,\"session_lifetime\":0})",
											"  }",
											"};",
											"",
											"pm.sendRequest(rateLimitTestKeyCreateRequest, function (err, response) { ",
											"    pm.test(\"Status code is 429\", function () {",
											"        var rateLimitRequest = {",
											"            url: 'http://localhost:8080/basic-protected-api/get',",
											"            method: 'GET',",
											"            header: 'Authorization:' + keyId",
											"        };",
											"        ",
											"        pm.sendRequest(rateLimitRequest, function (err, response) {",
											"            pm.expect(response.code).to.eql(200);",
											"",
											"            pm.sendRequest(rateLimitRequest, function (err, response) {",
											"                pm.expect(response.code).to.eql(200);",
											"",
											"                pm.sendRequest(rateLimitRequest, function (err, response) {",
											"                    pm.expect(response.code).to.eql(429);",
											"                    ",
											"                    var rateLimitTestKeyDeleteRequest = {",
											"                        url: 'http://localhost:8080/tyk/keys/' + keyId,",
											"                        method: 'DELETE',",
											"                        header: 'x-tyk-authorization:28d220fd77974a4facfb07dc1e49c2aa'",
											"                    };",
											"                ",
											"                    pm.sendRequest(rateLimitTestKeyDeleteRequest, function (err, response) { });",
											"",
											"                });",
											"            });",
											"        });",
											"    });",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "Authorization",
										"value": "ratelimit_key",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/basic-protected-api/get",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"basic-protected-api",
										"get"
									]
								},
								"description": "This API will showcase the Rate limiting feature of Tyk.\n\nRate limit is set as 2 per 5 seconds. More than 2 request per 5 will result in `429  Too many requests` error from gateway."
							},
							"response": []
						},
						{
							"name": "Throttling",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "23586ef8-1d1e-4837-9710-1a1e5762a1da",
										"exec": [
											"var keyId = pm.variables.replaceIn('{{$randomUUID}}');",
											"",
											"var throttlingTestKeyCreateRequest = {",
											"  url: 'http://localhost:8080/tyk/keys/' + keyId,",
											"  method: 'POST',",
											"  header: 'x-tyk-authorization:28d220fd77974a4facfb07dc1e49c2aa',",
											"  body: {",
											"      mode: 'raw',",
											"      raw: JSON.stringify({\"last_check\":0,\"allowance\":2,\"rate\":2,\"per\":5,\"throttle_interval\":5,\"throttle_retry_limit\":2,\"date_created\":\"2020-04-23T04:41:37.0404484Z\",\"expires\":0,\"quota_max\":-1,\"quota_renews\":1587616896,\"quota_remaining\":-1,\"quota_renewal_rate\":-1,\"access_rights\":{\"accbdd1b89e84ec97f4f16d4e3197d5c\":{\"api_name\":\"Basic Protected API\",\"api_id\":\"accbdd1b89e84ec97f4f16d4e3197d5c\",\"versions\":[\"Default\"],\"allowed_urls\":[],\"limit\":null,\"allowance_scope\":\"\"}},\"org_id\":\"5e9d9544a1dcd60001d0ed20\",\"oauth_client_id\":\"\",\"oauth_keys\":null,\"certificate\":\"\",\"basic_auth_data\":{\"user\":\"\",\"password\":\"\",\"hash_type\":\"\"},\"jwt_data\":{\"secret\":\"\"},\"hmac_enabled\":false,\"hmac_string\":\"\",\"is_inactive\":false,\"apply_policy_id\":\"\",\"apply_policies\":[],\"data_expires\":0,\"monitor\":{\"trigger_limits\":null},\"enable_detail_recording\":false,\"meta_data\":{},\"tags\":[],\"alias\":\"\",\"last_updated\":\"1587616897\",\"id_extractor_deadline\":0,\"session_lifetime\":0})",
											"  }",
											"};",
											"",
											"pm.sendRequest(throttlingTestKeyCreateRequest, function (err, response) { ",
											"    pm.test(\"Status code is 200\", function () {",
											"        var throttleRequest = {",
											"            url: 'http://localhost:8080/basic-protected-api/get',",
											"            method: 'GET',",
											"            header: 'Authorization:' + keyId",
											"        };",
											"        ",
											"        pm.sendRequest(throttleRequest, function (err, response) {",
											"            pm.expect(response.code).to.eql(200);",
											"",
											"            pm.sendRequest(throttleRequest, function (err, response) {",
											"                pm.expect(response.code).to.eql(200);",
											"",
											"                pm.sendRequest(throttleRequest, function (err, response) {",
											"                    pm.expect(response.code).to.eql(200);",
											"                    ",
											"                    var throttlingTestKeyDeleteRequest = {",
											"                            url: 'http://localhost:8080/tyk/keys/' + keyId,",
											"                            method: 'DELETE',",
											"                            header: 'x-tyk-authorization:28d220fd77974a4facfb07dc1e49c2aa'",
											"                        };",
											"                    ",
											"                    pm.sendRequest(throttlingTestKeyDeleteRequest, function (err, response) { });",
											"                });",
											"            });",
											"        });",
											"    });",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "Authorization",
										"type": "text",
										"value": "throttle_key"
									}
								],
								"url": {
									"raw": "http://localhost:8080/basic-protected-api/get",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"basic-protected-api",
										"get"
									]
								},
								"description": "This API will showcase the Throttling feature of Tyk.\n\nRate limit is set as 2 per 5 seconds. Gateway Throttling is configured for 10 times with 1 sec interval. \n\nWe can obeserve a delay in response due to throttling after the rate limit has been reached."
							},
							"response": []
						},
						{
							"name": "Quota Limit",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "7747958b-f1cf-47d3-abc4-bb69f49a1a04",
										"exec": [
											"var keyId = pm.variables.replaceIn('{{$randomUUID}}');",
											"",
											"var quotaTestKeyCreateRequest = {",
											"    url: 'http://localhost:8080/tyk/keys/' + keyId,",
											"    method: 'POST',",
											"    header: 'x-tyk-authorization:28d220fd77974a4facfb07dc1e49c2aa',",
											"    body: {",
											"        mode: 'raw',",
											"        raw: JSON.stringify({\"last_check\":0,\"allowance\":1000,\"rate\":1000,\"per\":60,\"throttle_interval\":-1,\"throttle_retry_limit\":-1,\"date_created\":\"2020-04-23T04:43:07.8812258Z\",\"expires\":0,\"quota_max\":2,\"quota_renews\":1587620587,\"quota_remaining\":2,\"quota_renewal_rate\":3600,\"access_rights\":{\"accbdd1b89e84ec97f4f16d4e3197d5c\":{\"api_name\":\"Basic Protected API\",\"api_id\":\"accbdd1b89e84ec97f4f16d4e3197d5c\",\"versions\":[\"Default\"],\"allowed_urls\":[],\"limit\":null,\"allowance_scope\":\"\"}},\"org_id\":\"5e9d9544a1dcd60001d0ed20\",\"oauth_client_id\":\"\",\"oauth_keys\":null,\"certificate\":\"\",\"basic_auth_data\":{\"user\":\"\",\"password\":\"\",\"hash_type\":\"\"},\"jwt_data\":{\"secret\":\"\"},\"hmac_enabled\":false,\"hmac_string\":\"\",\"is_inactive\":false,\"apply_policy_id\":\"\",\"apply_policies\":[],\"data_expires\":0,\"monitor\":{\"trigger_limits\":null},\"enable_detail_recording\":false,\"meta_data\":{},\"tags\":[],\"alias\":\"\",\"last_updated\":\"1587616987\",\"id_extractor_deadline\":0,\"session_lifetime\":0})",
											"  }",
											"};",
											"",
											"pm.sendRequest(quotaTestKeyCreateRequest, function (err, response) { ",
											"    pm.test(\"Status code is 403\", function () {",
											"        var quotaRequest = {",
											"            url: 'http://localhost:8080/basic-protected-api/get',",
											"            method: 'GET',",
											"            header: 'Authorization:' + keyId",
											"        };",
											"        ",
											"        pm.sendRequest(quotaRequest, function (err, response) {",
											"            pm.expect(response.headers.get(\"X-Ratelimit-Remaining\")).to.eql(\"1\");",
											"            pm.expect(response.code).to.eql(200);",
											"            ",
											"            pm.sendRequest(quotaRequest, function (err, response) {",
											"                pm.expect(response.headers.get(\"X-Ratelimit-Remaining\")).to.eql(\"0\");",
											"                pm.expect(response.code).to.eql(200);",
											"                ",
											"                pm.sendRequest(quotaRequest, function (err, response) {",
											"                    pm.expect(response.code).to.eql(403);",
											"                    ",
											"                    var quotaTestKeyDeleteRequest = {",
											"                        url: 'http://localhost:8080/tyk/keys/' + keyId,",
											"                        method: 'DELETE',",
											"                        header: 'x-tyk-authorization:28d220fd77974a4facfb07dc1e49c2aa'",
											"                    };",
											"                ",
											"                    pm.sendRequest(quotaTestKeyDeleteRequest, function (err, response) { });",
											"                });",
											"            });",
											"        });",
											"    });",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "Authorization",
										"type": "text",
										"value": "quota_key"
									}
								],
								"url": {
									"raw": "http://localhost:8080/basic-protected-api/get",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"basic-protected-api",
										"get"
									]
								},
								"description": "This API will showcase the Quota limiting feature of Tyk.\n\nQuota limit is set as 2 per hour. More than 2 request per hour will result in `403 Forbidden` error from gateway."
							},
							"response": []
						},
						{
							"name": "Load Balancing",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "251595bf-f76c-4246-a75e-d767ba852c0a",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Consecutive requests go to different hosts\", function () {",
											"    var response1Host;",
											"    var response2Host;",
											"    var loadBalancedRequest = {",
											"        url: 'http://localhost:8080/load-balanced-api/get',",
											"        method: 'GET'",
											"    };",
											"    ",
											"    pm.sendRequest(loadBalancedRequest, function (err, response1) {",
											"        pm.response.to.have.status(200);",
											"        response1Host=response1.json().headers.Host;",
											"        pm.expect(response1Host).to.match(/^httpbin2?$/);",
											"        ",
											"        pm.sendRequest(loadBalancedRequest, function (err, response2) {",
											"            pm.response.to.have.status(200);",
											"            response2Host=response2.json().headers.Host;",
											"            pm.expect(response2Host).to.match(/^httpbin2?$/);",
											"            pm.expect(response1Host).to.not.eql(response2Host);",
											"        });",
											"    });",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/load-balanced-api/get",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"load-balanced-api",
										"get"
									]
								},
								"description": "This request calls an API Definition which is configured to load balance the proxied requests across multiple upstream hosts. The API Definition specifies two hosts, `httpbin` and `httpbin2`. The Gateway uses round-robin load balancing, so each host is called in turn.\n\nCheck the `headers.Host` property of the response body, it will alternative between `httpbin` and `httpbin2`. This shows that the Gateway is load balancing the upstream requests."
							},
							"response": []
						},
						{
							"name": "Uptime Tests",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "bd415236-0729-45ed-9c9c-41bb66ce1a11",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Host is httpbin2\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers.Host).to.eql(\"httpbin2\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "http://localhost:8080/uptime-test-api/get",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"uptime-test-api",
										"get"
									]
								},
								"description": "**Note:** The API for this request must be activated before running the request. The API is inactive by default to prevent failing uptime tests from repeatedly generating error messages in the application logs. To activate the API, log in to the Dashboard, edit the 'Uptime Test API', set `active` to `true` (you can click the 'API Inactive' button) then update the API.\n\n***\n\nThis request calls an API which uses Uptime Tests to monitor the health of the upstream hosts it is configured to proxy requests to.\n\nIn this case, it is configred load balance requests upstream to `httpbin` and `httpbin2`. An uptime test has been added to the API Definition which calls the `status/500` endpoint of the `httpbin` host. This endpoint always returns `HTTP 500` status codes, which causes the uptime test to fail, triggering the removal of the `httpbin` host from the load balancer. This means that requests sent to this API will only be proxied to the `httpbin2` host, since the `httpbin` host has been marked as unhealthy.\n\nCheck the `headers.Hosts` property of the response body. This will always show `httpbin2`.\n\nIn order for the Gateway to remove the unhealthy host from the load balancer, the API Definition must have both nn Uptime Test using the same hostname, and the `check_host_against_uptime_tests` property set to `true`. If `check_host_against_uptime_tests` is not set to `true` then the unhealthy host will not be removed from the load balancer, only an event will be raised.\n\n**Note**: To reduce the amount of warning messages in the Gateway application log generated by failing tests, the uptime tests have been configured to run every 30 seconds. This means that on initial startup, the Gateway will proxy to both hosts (`httpbin` and `httpbin2`) until the first Uptime Test is run."
							},
							"response": []
						}
					],
					"protocolProfileBehavior": {},
					"_postman_isSubFolder": true
				}
			],
			"protocolProfileBehavior": {}
		},
		{
			"name": "System Management",
			"item": [
				{
					"name": "Importing Data",
					"item": [
						{
							"name": "Import custom key (part 1)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "6541f72b-13cf-42d0-993a-bc3c53b3eb7f",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Response action is `added`\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.action).to.eql(\"added\");",
											"});",
											"",
											"pm.test(\"Response key is not empty\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.key.length).to.be.above(0);",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "POST",
								"header": [
									{
										"key": "x-tyk-authorization",
										"value": "28d220fd77974a4facfb07dc1e49c2aa",
										"type": "text"
									}
								],
								"body": {
									"mode": "raw",
									"raw": "{\n    \"last_check\": 0,\n    \"allowance\": 1000,\n    \"rate\": 1000,\n    \"per\": 60,\n    \"throttle_interval\": -1,\n    \"throttle_retry_limit\": -1,\n    \"expires\": 0,\n    \"quota_max\": -1,\n    \"quota_renews\": 1587521934,\n    \"quota_remaining\": -1,\n    \"quota_renewal_rate\": -1,\n    \"access_rights\": {\n        \"accbdd1b89e84ec97f4f16d4e3197d5c\": {\n            \"api_name\": \"Basic Protected API\",\n            \"api_id\": \"accbdd1b89e84ec97f4f16d4e3197d5c\",\n            \"versions\": [\n                \"Default\"\n            ],\n            \"allowed_urls\": [],\n            \"limit\": null,\n            \"allowance_scope\": \"\"\n        }\n    },\n    \"org_id\": \"5e9d9544a1dcd60001d0ed20\"\n}",
									"options": {
										"raw": {
											"language": "json"
										}
									}
								},
								"url": {
									"raw": "http://localhost:8080/tyk/keys/my-custom-key",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"tyk",
										"keys",
										"my-custom-key"
									]
								},
								"description": "This request uses the Gateway API to import a custom key. The Gateway API is used as the Gateway is responsible for managing keys.\n\nThe URL defines the id that the key will be assigned, in this instance `my-custom-key`, which is very different to the random values assigned by the Gateway when creating keys normally.\n\nOnce imported, the key can be used to access the `Basic Protected API` (see part 2), as defined in the `access_rights` section of the key definition JSON (see request Body)."
							},
							"response": []
						},
						{
							"name": "Import custom key (part 2)",
							"event": [
								{
									"listen": "test",
									"script": {
										"id": "199f0adf-892d-40ce-85bd-50d0132269c2",
										"exec": [
											"pm.test(\"Status code is 200\", function () {",
											"    pm.response.to.have.status(200);",
											"});",
											"",
											"pm.test(\"Custom key was used\", function () {",
											"    var jsonData = pm.response.json();",
											"    pm.expect(jsonData.headers[\"Authorization\"]).to.eql(\"my-custom-key\");",
											"});"
										],
										"type": "text/javascript"
									}
								}
							],
							"request": {
								"method": "GET",
								"header": [
									{
										"key": "Authorization",
										"value": "my-custom-key",
										"type": "text"
									}
								],
								"url": {
									"raw": "http://localhost:8080/basic-protected-api/get",
									"protocol": "http",
									"host": [
										"localhost"
									],
									"port": "8080",
									"path": [
										"basic-protected-api",
										"get"
									]
								},
								"description": "This request uses the custom key imported in Part 1 (which must be run prior to this) to access a protected API.\n\nThe custom key is provided in the `Authorization` header of the request."
							},
							"response": []
						}
					],
					"protocolProfileBehavior": {},
					"_postman_isSubFolder": true
				},
				{
					"name": "Scaling",
					"item": [
						{
							"name": "Send request to additional Gateway",
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "https://localhost:8081/plugin-demo-api/anything/mock",
									"protocol": "https",
									"host": [
										"localhost"
									],
									"port": "8081",
									"path": [
										"plugin-demo-api",
										"anything",
										"mock"
									]
								},
								"description": "This request is sent to the container mapped on port `8081`. It is the TLS-enabled Gateway which is otherwise configured the same as the HTTP-only Gateway.\n\nYou can use the `add-gateway.sh` script to add more Gateways. Note that in order to access them using this request, you will need to use `http` and change the port number - the Gateway created by the script has a random port assigned to it."
							},
							"response": []
						}
					],
					"protocolProfileBehavior": {},
					"_postman_isSubFolder": true
				}
			],
			"protocolProfileBehavior": {}
		},
		{
			"name": "Gateway Configuration",
			"item": [
				{
					"name": "TLS",
					"item": [
						{
							"name": "TLS request to Gateway",
							"request": {
								"method": "GET",
								"header": [],
								"url": {
									"raw": "https://localhost:8081/basic-open-api/get",
									"protocol": "https",
									"host": [
										"localhost"
									],
									"port": "8081",
									"path": [
										"basic-open-api",
										"get"
									]
								},
								"description": "**Prerequisite**: `tls` feature deployment.\n\nThis request uses the HTTPS scheme to connect to the API Gateway. The Gateway is configured to listen for requests on `localhost` and use a locally stored self-signed certificate.\n\nThis is configured in the `http_server_options` section of the Gateway's configuration file.\n**Note:** self-signed cetificates will fail verification by an API client, which will prevent the request for working. To resolve this, configure your client to allow self-signed certificates."
							},
							"response": []
						}
					],
					"protocolProfileBehavior": {},
					"_postman_isSubFolder": true
				}
			],
			"protocolProfileBehavior": {}
		},
		{
			"name": "Dashboard Admin API",
			"item": [
				{
					"name": "Get Organisations",
					"event": [
						{
							"listen": "test",
							"script": {
								"id": "921cf3ff-452e-4003-bb55-e480f52f175c",
								"exec": [
									"pm.test(\"Status code is 200\", function () {",
									"    pm.response.to.have.status(200);",
									"});"
								],
								"type": "text/javascript"
							}
						}
					],
					"request": {
						"method": "GET",
						"header": [
							{
								"key": "admin-auth",
								"value": "ff8289874f5d45de945a2ea5c02580fe",
								"type": "text"
							}
						],
						"url": {
							"raw": "localhost:3000/admin/organisations",
							"host": [
								"localhost"
							],
							"port": "3000",
							"path": [
								"admin",
								"organisations"
							]
						},
						"description": "This request gets all the Organisations. These are the root objects in the Dashboard database, which other objects are linked to.\n\nOrganistaions enable multi-tenancy in the Tyk Dashboard."
					},
					"response": []
				}
			],
			"protocolProfileBehavior": {}
		},
		{
			"name": "Gateway Functionality",
			"item": [
				{
					"name": "Batch request processing",
					"event": [
						{
							"listen": "test",
							"script": {
								"id": "084ea9b3-1ca6-41db-a3f0-0a6a4451bd85",
								"exec": [
									"pm.test(\"Status code is 200\", function () {",
									"    pm.response.to.have.status(200);",
									"});",
									"",
									"pm.test(\"relative_url for 1st response is /get\", function () {",
									"    var jsonData = pm.response.json();",
									"    pm.expect(jsonData[0].relative_url).to.eql(\"/get\");",
									"});",
									"",
									"pm.test(\"code for 1st response is 200\", function () {",
									"    var jsonData = pm.response.json();",
									"    pm.expect(jsonData[0].code).to.eql(200);",
									"});",
									"",
									"pm.test(\"relative_url for 2nd response is /uuid\", function () {",
									"    var jsonData = pm.response.json();",
									"    pm.expect(jsonData[1].relative_url).to.eql(\"/uuid\");",
									"});",
									"",
									"pm.test(\"code for 2nd response is 200\", function () {",
									"    var jsonData = pm.response.json();",
									"    pm.expect(jsonData[1].code).to.eql(200);",
									"});"
								],
								"type": "text/javascript"
							}
						}
					],
					"request": {
						"method": "POST",
						"header": [],
						"body": {
							"mode": "raw",
							"raw": "{\n    \"requests\": [\n      {\n        \"method\": \"GET\",\n        \"headers\": {\n          \"batch-request\": \"1\"\n        },\n        \"body\": \"\",\n        \"relative_url\": \"/get\"\n      },\n      {\n        \"method\": \"GET\",\n        \"headers\": {},\n        \"body\": \"\",\n        \"relative_url\": \"/uuid\"\n      }\n    ],\n    \"suppress_parallel_execution\": true\n  }",
							"options": {
								"raw": {
									"language": "json"
								}
							}
						},
						"url": {
							"raw": "http://localhost:8080/basic-open-api/tyk/batch/",
							"protocol": "http",
							"host": [
								"localhost"
							],
							"port": "8080",
							"path": [
								"basic-open-api",
								"tyk",
								"batch",
								""
							]
						},
						"description": "This request calls the special `/tyk/batch` endpoint, which enables the Gateway to make multiple API requests baesd on a single API request received from the client. The special batch endpoint path is added to the listen path for the API, and must end with a trailing slash.\n\nWhen calling the batch endpoint, the API client must specify the requests that the Gateway will make. In this case, the body defines two requests which go to `/uuid` and `/get`. The request for `/get` also adds a custom header with the key `batch-request`. \n\nThe `suppress_parallel_execution` property defines whether the Gateway will send the requests sequentially or in parallel - in this case the setting is `true`, so the Gateway will send the requests in in sequence, which means the response data will be in the same sequence.\n\nThe response body contains data about the responses the Gateway received for the requests. The `requests` property contains the response data, showing the URL called, HTTP status, headers and body data received.\n\nThe batch request functionality must be enabled on the API definition by setting `enable_batch_request_support` to `true`."
					},
					"response": []
				}
			],
			"protocolProfileBehavior": {}
		},
		{
			"name": "Basic Test Request",
			"event": [
				{
					"listen": "test",
					"script": {
						"id": "a6176da1-f05d-4965-992a-afc7bf551350",
						"exec": [
							"pm.test(\"Status code is 200\", function () {",
							"    pm.response.to.have.status(200);",
							"});"
						],
						"type": "text/javascript"
					}
				}
			],
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/basic-open-api/get",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"basic-open-api",
						"get"
					]
				},
				"description": "This is a basic test request to check that the Gateway is working ok.\n\nA `200 OK` status code and JSON response should be received in the response."
			},
			"response": []
		}
	],
	"protocolProfileBehavior": {}
}