Just a thought on 1
In the API Proxy, use a JavaScript policy to check the consumer app. You can check the consumer app by inspecting the consumer key property in the request object.
var consumerKey = context.getVariable("request.header.apikey");
if (consumerKey === "C1") {
context.setVariable("timeoutValue", "XXXX");
} else if (consumerKey === "C2") {
context.setVariable("timeoutValue", "YYYY");
}
JS code sets the timeoutValue variable to XXXX seconds if the consumer app is C1, and sets it to YYYY seconds if the consumer app is C2.
Now we can set in Target Endpoint configuration for the API Proxy, use a variable to set the timeout value.
<HTTPTargetConnection>
<Properties>
<Property name="connectionTimeout">{timeoutValue}</Property>
<Property name="socketTimeout">{timeoutValue}</Property>
</Properties>
</HTTPTargetConnection>
This may have challenge if variable is not honored(unsure if engineering team added this feature) but plan B is as follow(not a great solution but for couple of consumers)..
We can create multiple Target Endpoints, one for each consumer app, with different timeout values. Then, you can use a JavaScript policy in your API Proxy to set the appropriate Target Endpoint based on the consumer app.
LinkedIn
Twitter
