Apigee Edge for Private Cloud 4.18.01 Is Here!

We’re excited to announce the general availability of Apigee Edge for Private Cloud 4.18.01. This release features several new capabilities, including the Apigee Edge unified experience, native policies for JSON web tokens (JWT), and more.

Edge unified experience (UE) beta

Trying out the new UE for private cloud requires you to enable SAML single-sign-on for Apigee Edge. You’ll have to install the new user experience on a separate VM (one that doesn’t contain other Edge components).

A couple of things worth noting about Edge UE for private cloud:

• The specs feature and integrated portal are not supported in Edge UE for private cloud.
• You can run basic auth-enabled Classic UI and Edge UE simultaneously.

External role mapping V2

• Manage Apigee Edge roles to match your organizational structure.
• Automatically sync user group changes in your organization with the proper role in Apigee Edge.
• Grant users additional roles in Apigee Edge when assigned to an additional group.

An example implementation is as follows:

public class ExternalRoleMapperImpl implements ExternalRoleMapperServiceV2{
   private DirContext initialDirContext;
   private SearchControls controls = new SearchControls();
   @Override
   public Collection<NameSpacedRole> getUserRoles(String username, NameSpace expectedNamespace) throws ExternalRoleMappingException {
       Collection<NameSpacedRole> roles = new HashSet<>();
       String orgName = "tech-brief";
       System.out.println("Getting Group");
       String userGroupFilter = "(memberUid=uid)";
       controls.setSearchScope(SearchControls.ONELEVEL_SCOPE);
       try {
           /***************************************************/
           /************** Fetch groups for user **************/
           /***************************************************/
           NamingEnumeration<SearchResult> groupResults = initialDirContext.search(groupDN, userGroupFilter.replace("uid", username), new Object[] { "", "" }, controls);
           while (groupResults.hasMoreElements()) {
               SearchResult searchResult = groupResults.nextElement();
               Attributes attributes = searchResult.getAttributes();
               String groupName = attributes.get("cn").get().toString();
               if (groupName.equals("BusDev")) {
                  roles.add(new NameSpacedRole("businessuser",new OrganizationNamespace(orgName)));
               } else if (groupName.equals("Eng")) {
                   roles.add(new NameSpacedRole("user",new OrganizationNamespace(orgName)));
               } else if (groupName.equals("sysadmin")) {
                   roles.add(new NameSpacedRole("orgadmin",new OrganizationNamespace(orgName)));
                   roles.add(new NameSpacedRole("sysadmin",SystemNamespace.get()));
               } else {
                   roles.add(new NameSpacedRole("user", new OrganizationNamespace(orgName)));
               }
               //groups.add(groupName);
           }
       } catch (NamingException e) {
           e.printStackTrace();
           throw new ExternalTeamMappingException(e);
       }
       return roles;
   }
}

In the example above, we are mapping the “BusDev” group in corporate LDAP to the “businessuser” role and the “Eng” group to Apigee Edge user roles.

JSON web token (JWT) beta

There are three new policies introduced in Apigee Edge: “Generate JWT,” “Verify JWT,” and “Decode JWT.” Generate JWT allows you to sign a set of configurable claims and sign with HS256, HS384, HS512, RS256, RS384, or RS512 digital signature algorithms.Verify JWT verifies the token signature and extracts the claims in flow variables so that subsequent policies or conditions can examine those values to make authorization or routing decisions. Decode JWT only decodes JWT without verifying the signature.

Other improvements

• Name validation that enforces a naming rule upon on creation of new entities. Entities validated on creation or update include API proxies, policies (and policy names in API proxy definitions), virtual hosts, roles, caches, target servers, data masks for debugging, keystores and truststores, and resource files in API proxies.
• The ability to run a setup command with -t option to validate all system requirements without installing the components.
• Postgres 9.6 to take advantage of parallel processing query and improved analytics performance.

How to upgrade

There’s a lot more to share than what we’ve covered here; additional details can be found in our release notes.

Visit Apigee Community to ask questions, leave feedback, or start a conversation.