Supported policies in compiler

[Mielek]

Currently, the Policy Toolkit supports a limited set of policies in the compiler. We aim to extend this support to include all policies available in Azure API Management, as detailed in the documentation. The goal of this issue is to track the implementation of the remaining policies. The implementation of policies in the emulator will be tracked by other issues.

External contributors are warmly invited to participate in this issue. Your feedback is invaluable to us, and we encourage you to engage in the following ways:

• Cast your vote in the comments on which policies should be prioritized next.
• Share in the comments which policy are you interested in implementing to enhance our toolkit.

Implementation example

In the project we are now wanting to support only simple config-based policy implementation. Example of the implementation can be found for the json-to-xml policy.

Work plan:

• Add method to the section context interfaces in which policy is available in the Authoring project
• Add new compiler class in the src/Core/Compiling/Policy in the Core project
• Add new test class in the test/Test.Core/Compiling in the Test.Core project
• Prepare tests and fill compiler class

List of policies

Tasks

Preview Give feedback

1. authentication-basic
2. authentication-certificate
3. authentication-managed-identity
4. azure-openai-emit-token-metric
5. azure-openai-semantic-cache-lookup
6. azure-openai-semantic-cache-store
7. azure-openai-token-limit
8. cache-lookup
9. cache-lookup-value
10. cache-store
11. cache-store-value
12. cache-remove-value
13. check-header
14. choose
15. cors
16. cross-domain
17. emit-metric
18. find-and-replace
19. forward-request
20. get-authorization-context
21. include-fragment
22. invoke-dapr-binding
23. ip-filter
24. jsonp
25. json-to-xml
26. limit-concurrency
27. llm-emit-token-metric
28. llm-semantic-cache-lookup
29. llm-semantic-cache-store
30. llm-token-limit
31. log-to-eventhub
32. mock-response
33. proxy
34. publish-to-dapr
35. quota
36. quota-by-key
37. rate-limit
38. rate-limit-by-key
39. redirect-content-urls
40. retry
41. return-response
42. rewrite-uri
43. send-one-way-request
44. send-request
45. set-backend-service
46. set-backend-service (Dapr)
47. set-body
48. set-header
49. set-method
50. set-query-parameter
51. set-status
52. set-variable
53. trace
54. validate-azure-ad-token
55. validate-client-certificate
56. validate-content
57. validate-headers
58. validate-jwt
59. validate-odata-request
60. validate-parameters
61. validate-status-code
62. wait
63. xml-to-json
64. xsl-transform

Excluded policies

Please note that this initiative does not include the implementation of GraphQL resolver policies, as the creation of GraphQL policy documents is not yet supported. The development of these policies will be done once we introduce GraphQL policy document capabilities to the toolkit.

• cosmosdb-data-source
• http-data-source
• publish-event
• sql-data-source
• validate-graphql-request

Workaround

InlinePolicy serves as a temporary solution until all policies are fully implemented. It enables the inclusion of policies that have not yet been incorporated into the document.

context.InlinePolicy("<set-backend-service base-url=\"https://internal.contoso.example\" />");