Repository navigation

Issues

[Bug]: App LLM proxies description is missing from UI
Bug
wso2/api-platform#3904 · opened on Oct 23, 2026
[Bug]: json-xml-mediator matches Content-Type with a case-sensitive substring check, so Application/JSON is refused
Bug
wso2/api-platform#3903 · opened on Oct 23, 2026
[Bug]: respond policy accepts CR and LF in header values, so a configured value can inject extra response headers
Bug
wso2/api-platform#3902 · opened on Oct 23, 2026
[Bug]: Undeploying an API from the gateway fails with 400 in On-Prem
Bug
wso2/api-platform#3900 · opened on Oct 23, 2026
[Bug]: API's context can't be updated in On-Prem
Bug
wso2/api-platform#3899 · opened on Oct 23, 2026
[Improvement]: Add Backend and frontend Pagination for All kinds
Task
wso2/api-platform#3895 · opened on Oct 22, 2026
[Bug]: word-count-guardrail treats non-breaking spaces and other Unicode spaces as part of a word, so "hello\u00a0world" counts as 1 word
Bug
wso2/api-platform#3886 · opened on Oct 22, 2026
1
[Bug]: sentence-count-guardrail counts whitespace-only segments in the buffered path but not in the streaming path, so the same text can pass one and fail the other
Bug
wso2/api-platform#3885 · opened on Oct 22, 2026
1
[Bug]: host-rewrite policy accepts Host values its docs forbid, including CRLF, spaces, null bytes and lengths over 255
Bug
wso2/api-platform#3884 · opened on Oct 22, 2026
1
[Bug]: redirect policy "prefix" path mode ignores the API context, producing /footwear/catalog/shoes/... instead of /catalog/footwear/...
Bug
wso2/api-platform#3883 · opened on Oct 22, 2026
1
[Bug]: basic-auth policy rejects valid credentials when the Authorization scheme is not spelled exactly "Basic"
Bug
wso2/api-platform#3882 · opened on Oct 22, 2026
1
[Bug]: CORS policy replaces the upstream Vary header with "Vary: Origin" and adds no Vary when it strips CORS headers
Bug
wso2/api-platform#3876 · opened on Oct 22, 2026
1
[Feature]: Custom traffic log format support
Feature
wso2/api-platform#3875 · opened on Oct 22, 2026
[Feature]: Gateway signing keys and JWKS endpoint (/.well-known/jwks.json)
Feature
wso2/api-platform#3863 · opened on Oct 21, 2026
[Bug]: Deleting an MCP proxy leaves its API keys in the gateway's memory and in the policy engine
Bug
wso2/api-platform#3852 · opened on Oct 21, 2026
[Bug]: "ap gateway mcp generate" fails on tools-only MCP servers because it always calls prompts/list and resources/list
Bug
wso2/api-platform#3848 · opened on Oct 20, 2026
[Improvement]: Gateway Uptime Monitoring - make health checks dependency-aware (platform-api, gateway controller, gateway runtime)
wso2/api-platform#3829 · opened on Oct 19, 2026
[Bug]: Duplicate API Portal subscriptions break credentials: the second token never works, and deleting it revokes the first
Bug
wso2/api-platform#3812 · opened on Oct 16, 2026
[Improvement]: Clean the API Platform Docker Images
wso2/api-platform#3811 · opened on Oct 16, 2026
[Bug]: [AI GW 1.2.0] Large request bodies are rejected on routes with body-processing policies, regardless of configured body limits
Bug
wso2/api-platform#3807 · opened on Oct 16, 2026
Allow MCP proxy viewers to resolve the registered API Portal URL
wso2/api-platform#3805 · opened on Oct 16, 2026
[Feature]: WebSocket API Support for API Platform
Feature
wso2/api-platform#3798 · opened on Oct 15, 2026
1
[Bug]: Platform API accepts subscriptions with plans not enabled for the API (or with no plan)
Bug
wso2/api-platform#3795 · opened on Oct 15, 2026
gateway-controller: upstream auth header values are corrupted or break the config, because GetParamsOfPolicy pastes them into YAML
wso2/api-platform#3791 · opened on Oct 15, 2026
[Improvement]: Gateway setup: let users revoke a registration token from the console
Feature
wso2/api-platform#3790 · opened on Oct 15, 2026