Secure your gateway to prevent unauthenticated and unauthorized access to your apps.
Access logging
Capture an access log for all the requests that enter the gateway.
CORS
Enforce client-site access controls with cross-origin resource sharing (CORS).
CSRF
Apply a CSRF filter to the gateway to help prevent cross-site request forgery attacks.
Data loss prevention (DLP)
Ensure that sensitive data isn't logged or leaked by masking data in response bodies<!–and headers, …
External authentication and authorization
JWT
Rate limiting
Web Application Firewall (WAF)