Wishula Jayathunga·Oct 25The Leaky EnvelopeHow a single missing else branch in an MCP gateway let internal JSON‑RPC protocol data leak straight into backend request bodies and how a…
Gayuthdemika·Oct 12The Valid Token That Crashed Our Tenant FilterHow one companyId claim keeps every customer’s data apart across WSO2 Identity Server, API Manager and .NET 8, and what broke at each hop…
Ramiiyan Sriraguhan·Oct 4Automating WSO2 APIM Data Migration — Treat the Runbook Like Code (With Checkpoints)TL;DR: WSO2 APIM data migration isn’t a one-click upgrade. It’s a multi-step, multi-client, multi-database process — and you’ll probably…
Nadee Poornima·Jun 30Mitigating Clickjacking Vulnerabilities in WSO2 API Manager 3.2.0: A Complete GuideClickjacking is a malicious technique where an attacker tricks a user into clicking on a disguised element of a webpage, potentially…
Dilky Liyanage·Jun 22Investigating High Memory Utilization in a WSO2 API Manager DeploymentImagine you’re monitoring a production WSO2 API Manager deployment and suddenly notice one of your gateway pods sitting at 90% memory…
Gayantha Namarathna·Jun 21Configure the WSO2 product with MSSQL using Windows AuthenticationHere’s a complete step-by-step guide to configuring WSO2 API Manager 4.5.0 with MSSQL using Windows (Integrated) Authentication.
Nelush Gayashan Fernando·Jun 20Building a Production-Grade Custom Signup Workflow for WSO2 API Manager: A Complete TutorialHow to replace WSO2 APIM’s silent developer-signup workflow with branded HTML emails, a hermetic test suite, and a real production bug fix…
Neethamadhu Madurasinghe·Jun 15Implementing Remote OAuth 2.0 Governance with WSO2 API Manager 4.6.0 for MCP ServersAutonomous AI agents are rapidly transitioning to crucial enterprise assets. As protocols like Anthropic’s Model Context Protocol (MCP)…
LUKMAN | WSO2 Ambasador (Asia Pasific Region)·May 8Encrypt JSON Payloads with Class Mediators in WSO2 API Manager 4.6In one of my previous projects, a client requested a way to secure sensitive data before it reached backend services. The request contained…
Isindu Tharudinitha·Apr 20A developer’s honest account of building production-grade API monetization, and why Stripe’s…I spent the better part of several weeks configuring Stripe-based API monetization on WSO2 API Manager 4.5.0. The official documentation…
