Include Additional Headers in the API Console

The Swagger API Console is a JavaScript client that runs in the API Store and makes JavaScript calls from the Store to the API Gateway. Since the API Store and Gateway run on two different ports, we have enabled cross-origin resource sharing (CORS) between the two. You must specify any additional headers that you want to add to the API Console under the CORS configuration.

Open the CORS configuration in the <APIM_HOME>/repository/conf/api-manager.xml file, enable CORS if it is not enabled already and specify the additional headers (SOAPAction, in this case) under the <Access-Control-Allow-Headers> element:

 <CORSConfiguration>
    <Enabled>true</Enabled>
    <Access-Control-Allow-Origin>*</Access-Control-Allow-Origin>
    <Access-Control-Allow-Methods>GET,PUT,POST,DELETE,PATCH,OPTIONS</Access-Control-Allow-Methods>
    <Access-Control-Allow-Headers>authorization,Access-Control-Allow-Origin,Content-Type,SOAPAction</Access-Control-Allow-Headers>
</CORSConfiguration>

Next, let's see how to add the header as a parameter to the API Console.

1. Log in to the API Publisher and click the API that you want to invoke (e.g., PhoneVerification).

2. Click the Edit link next to the API's name, navigate down to the API Definition section and click on the POST method to expand it. 
   

3. Update the Produces and Consumes fields to text/xml and create the following header using the Add Parameter button.

   Parameter name	Values
   SOAPAction	Description: Set to http://ws.cdyne.com/PhoneVerify/query/CheckPhoneNumber Parameter Type: Header Data Type: String Required: False

   

4. Once you are done, click Save.

5. Log in to the API Store, subscribe to the API and generate an access token.
   If it's an API that you are already subscribed to, you might have to renew the access token from the My Subscriptions page.
   
6. Click on the API again to open it and then click its API Console tab.
   

7. Expand the POST method, fill the parameter values and invoke the API. For example,

   Parameter	Value
   Body	This is the example SOAP request that we copied from the SOAP UI of the previous tutorial: <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:quer="http://ws.cdyne.com/PhoneVerify/query"> <soapenv:Header/> <soapenv:Body> <quer:CheckPhoneNumber> <!--Optional:--> <quer:PhoneNumber>123456</quer:PhoneNumber> <!--Optional:--> <quer:LicenseKey>0</quer:LicenseKey> </quer:CheckPhoneNumber> </soapenv:Body> </soapenv:Envelope>
   Parameter Content Type	text/xml
   SOAPAction	http://ws.cdyne.com/PhoneVerify/query/CheckPhoneNumber

   

8. Note the result that appears on the console. As you gave an invalid phone number here, the result is invalid.
   

You have added SOAP parameters to the API Console and invoked a SOAP service using the API Console.