Version 5.x has been out of support since December 13, 2022, and this corresponding section of the documentation is no longer maintained. We strongly recommend upgrading to a supported version.

Securing and Accessing API Endpoints

A typical frontend application will call two types of APIs:

frontend exclusive APIs (aka local APIs)

These APIs only exist to support the specific frontend; they are not shared with other frontends. They are typically located in the BFF host and can be called directly by the frontend.

shared APIs (aka remote APIs)

These APIs are deployed on a different host than the BFF, typically because they need to be shared between multiple frontends or (more generally speaking) multiple clients. These APIs can only be called via the BFF host acting as a proxy.