OpenAPI API Gateway Framework

This repository now includes a lightweight, configurable API gateway framework built with FastAPI.

What It Provides

• Dynamic gateway routes loaded from YAML (config/gateway.yaml)
• Configurable upstream targets and per-upstream timeout settings
• OpenAPI docs for gateway endpoints via FastAPI (/docs)
• Optional serving of an external OpenAPI contract (/openapi/external.json)
• Administrative portal at /admin/portal
• Runtime configuration editor via admin endpoints
• API key creation/list/revocation with optional route protection
• Built-in management endpoints:
  • GET /healthz
  • GET /readyz
  • GET /admin/routes

Project Structure

• src/gateway_framework/app.py: app factory and dynamic route registration
• src/gateway_framework/proxy.py: request forwarding/proxy logic
• src/gateway_framework/config.py: config schema and loader
• src/gateway_framework/main.py: ASGI entrypoint
• config/gateway.yaml: route and upstream configuration
• openapi_json/lta_datamall_openapi_v0-1-1.json: external OpenAPI contract

Quick Start

1. Install uv if not already installed:

curl -LsSf https://astral.sh/uv/install.sh | sh

2. Sync dependencies and create the project virtual environment:

uv sync

3. Update config/gateway.yaml with real upstream URLs.
4. Run the gateway with the managed environment:

uv run uvicorn gateway_framework.main:app --reload --app-dir src

5. Open the docs:

• http://127.0.0.1:8000/docs

Configuration Model

config/gateway.yaml uses this model:

settings:
  title: string
  version: string
  description: string
  external_openapi_file: path/to/openapi.json
  require_api_key: false
  api_keys_file: config/api_keys.json
  admin_api_key_env: ADMIN_API_KEY

upstreams:
  service_name:
    base_url: https://service.example.com/
    timeout_seconds: 15

routes:
  - path: /api/v1/resource
    methods: [GET, POST]
    upstream: service_name
    upstream_path: /v2/resource
    strip_prefix: /api
    summary: Optional operation summary
    tags: [Gateway]
    operation_id: gateway_resource_get

Notes:

• path is the public gateway path.
• upstream_path overrides forwarded path.
• strip_prefix removes a leading path segment before forwarding.

Administrative Portal and Dashboard

• Admin UI: GET /admin/portal
• Admin summary: GET /admin/dashboard
• Get config YAML: GET /admin/config
• Save config YAML: PUT /admin/config
• List API keys: GET /admin/api-keys
• Create API key: POST /admin/api-keys with body {"name":"client-name"}
• Revoke API key: DELETE /admin/api-keys/{key_id}

Optional admin auth:

• Set environment variable ADMIN_API_KEY before startup.
• Send header x-admin-key: <your-admin-key> to admin endpoints.

API Key Protection for Gateway Routes

• Enable gateway key checks by setting settings.require_api_key: true.
• Clients then must send x-api-key: <key> on proxied route requests.
• Create keys from the admin portal or POST /admin/api-keys.

Scaling and Configurability Guidance

• Add routes through config, not code, for repeatable deployments.
• Split large configurations into environment-specific files and set GATEWAY_CONFIG_PATH.
• Keep route changes backward compatible (/api/v1 stability) for client safety.
• Define explicit timeout values per upstream to isolate slow dependencies.

Next Steps

• Add auth/rate limiting middleware for production.
• Add OpenAPI linting in CI (for example, Redocly CLI).
• Add contract tests for every configured route.

Common uv Commands

• Run tests: uv run pytest
• Run lint: uv run ruff check .
• Add dependency: uv add <package>
• Add dev dependency: uv add --dev <package>