request verb - only allow GET requests

I want my proxy to be read-only, ie. only allow GET requests, but not POST / DELETE / PUT. Is there a policy that I can add for this to preflow?

1 Like

There are two ways of doing it. One explained here: https://community.apigee.com/questions/26386/api-http-methods-granularity-within-products.html

Another: you could add a raise fault policy with a condition to execute when request.verb != GET

2 Likes

Welcome to Apigee community @jasonbrown :slight_smile: