Developer Portal
The Developer Portal is the API consumer's interface. Developers use it to discover APIs, manage subscriptions, and test endpoints.
URL: portal.gostoa.dev
Getting Started
- Navigate to the Portal URL
- Click Sign In — authenticates via Keycloak (OIDC client:
stoa-portal) - You'll see the API catalog on the home page
API Catalog
The catalog displays all APIs published to the Portal by tenant admins.
Browsing
- Search: Full-text search across API names, descriptions, and tags
- Filter: Filter by category, version, or tenant
- Sort: Sort by name, date published, or popularity
API Detail Page
Click on an API to view:
- Description: Overview and purpose
- Documentation: Interactive OpenAPI/Swagger viewer
- Versions: Available versions with changelog
- Subscribe button: Request access to the API
Subscriptions
Creating a Subscription
- Navigate to the API you want to use
- Click Subscribe
- Select an existing application or create a new one
- Choose a plan (if multiple plans are available)
- Submit the request
Subscription Status
Track your subscriptions in My Subscriptions:
| Status | Meaning |
|---|---|
| Pending | Awaiting tenant admin approval |
| Active | Access granted — credentials available |
| Suspended | Temporarily paused by admin |
| Rejected | Request denied |
Viewing Credentials
Once a subscription is approved:
- Go to My Subscriptions
- Click on the active subscription
- View the API key or OAuth credentials
- Copy credentials for use in your application
Applications
Applications represent your client software that consumes APIs.
Creating an Application
- Navigate to My Applications
- Click Create Application
- Enter a name and description
- The application is created and ready for subscriptions
Application Dashboard
View all subscriptions, credentials, and usage metrics for each application.
Testing APIs
The Portal includes an interactive API tester:
- Open an API with an active subscription
- Navigate to the Try It section
- Select an endpoint
- Fill in parameters
- Click Send to execute the request
- View the response with headers and body
Authentication
The Portal uses Keycloak for authentication:
- OIDC Client:
stoa-portal - Login: Keycloak login page with username/password or SSO
- Session: JWT tokens stored in
sessionStorage - Token refresh: Handled automatically by
react-oidc-context
See Authentication for Keycloak configuration.