With WSO2 API Manager, you can maintain a production and a sandbox endpoint for a given API. The production endpoint is the actual location of the API, whereas the sandbox endpoint points to its testing/pre-production environment. When you publish an API using the API Publisher, it gets deployed on the API Gateway. By default, there's a single Gateway instance (deployed either externally or embedded within the publisher). This Gateway instance supports both production and sandbox token types. When an API request comes to the API Gateway, it checks whether the requesting token is of type ' PRODUCTION ' or ' SANDBOX ' and forwards the request to the appropriate endpoint.
The diagram below depicts the default scenarios.
Figure: Both production and testing API requests are handled through a single gateway (default scenario)
The above API Gateway is known as a Hybrid API Gateway since it passes through both production and sandbox traffic. Instead of having the above approach, it is also possible to publish an API to two different API Gateways. One which will only pass through production traffic and the other which will only pass through sandbox traffic.
...