When using the edgemicro gateway in the products which url needs whitelisting in the products used under resources? In addition to the proxy being added to the product?

Currently, edgemicro only honors the proxy name. More details:

1. You create edgemicro_ prefixed proxy with base path and target.

2. You add this proxy to a product let's call it edgemicro-prod1

3. When API call is made through edgemicro using apiKey or JWT token, edgemicro checks if basepath of API matches with basepath of edgemicro_proxy that is approved for list of products approved for that key.

We can add more rules if needed but we did not want to complicate things unless we have to. Hope it helps.

I have 2 identical products with 2 different dev-applications associated (2 api-keys) One has /** as resources. The other does not, only the target endpoint.)

Using curl and api-keys. The api-key associated with the first product (with /** in resources) always works The api-key associated with the second product (without /** only with the target endpoint in resources) Fails with access_denied