v1.0.0
Doorman v1.0.0
First stable release of a lightweight API gateway providing a single entry point for REST, gRPC, GraphQL, SOAP, and AI workloads with integrated security and traffic controls.
Highlights
- Multi‑protocol: REST, gRPC, GraphQL, SOAP, AI streaming
- AuthZ/AuthN: JWT auth, RBAC roles, user groups
- Subscriptions: Enforces API access by subscription
- Traffic controls: Rate limits, throttling, retries
- Storage: In‑memory (dev/test) and MongoDB + Redis (prod). SQLite is not supported.
Security
- Admin isolation: Non‑admin users can’t view/modify admin accounts
- Audit logging: Tracks configuration changes and platform events
- Request validation: Strict route matching and payload checks to reduce injection/traversal risk
- Data masking: Filters sensitive values from logs and responses
Operations
- Management dashboard: Next.js UI for configuration and live traffic views
- Snapshots & rollback: Create snapshots and roll back configuration (requires persistent storage for durability)
- Import/export: Migrate APIs, endpoints, roles via JSON
- Metrics: Latency, throughput, and error rates for registered services
Requirements
- Python 3.10+ for backend services
- Docker Compose for deployment
- Production: Redis (caching/rate limiting) and MongoDB (config/user persistence)