Response Processing
These policies are used to specify how the response message from the API has to be transformed or pre-processed and configure the masking criteria for the data to be masked before it is submitted to the application. This is required to protect the data and accommodate differences between the message content that an API is capable of submitting and the message content that an application expects. The policies included in this stage are:
Invoke webMethods IS
Response Transformation
Validate API Specification
CORS
Data Masking
Custom Extension
Custom Extension policies allow you to handle requirements that might not be provided by the out-of-the-box policies. You can add these custom extensions into
API Gateway policy stages. To learn more about Custom Extension, see
Custom Policy Extension.