Microsoft has rolled out DevProxy 0.22, the latest iteration of its command-line tool designed for API simulation. This update introduces enhanced logging capabilities and a streamlined approach to detecting minimal permissions, eliminating the dependency on Azure API Center.

What Is DevProxy?

DevProxy, formerly known as the Microsoft 365 Developer Proxy, is a versatile tool that allows developers to simulate various API and network behaviors, making their applications more resilient. Acting as a proxy, the tool can mimic failure scenarios, throttling, rate limits, and delayed API responses. It also supports mocking API-specific responses.

When paired with the Dev Tunnels CLI—a utility similar to ngrok—DevProxy can inspect communication between cloud services, providing insights into the messages exchanged during API calls.

Key Features of DevProxy 0.22

Improved Logging

The updated logging system in version 0.22 now displays plugin names directly in the log output. This change simplifies the identification of plugins interacting with specific requests or responses. Additionally, a new log type, skip, flags plugins that do not influence a given request, making debugging and analysis more efficient.

Minimal Permissions Plugin

Previously, the ApiCenterMinimalPermissionsPlugin—introduced in version 0.19—enabled the verification of API call permissions by checking tokens against endpoint definitions stored in Azure API Center. The new MinimalPermissionsPlugin, featured in version 0.22, extends this functionality by allowing developers to define minimal permissions locally. Instead of relying on Azure, the plugin reads specifications from files stored in local directories, providing more flexibility in managing permissions.

JWT Token Enhancements

Version 0.21 of DevProxy introduced the jwt create command, which generates JWT tokens with specific claims for API testing. In this release, the tool expands this feature by allowing developers to specify custom signing keys for tokens. By using their own key pairs, developers can validate tokens against their API code, improving security testing and verification processes.

Why DevProxy 0.22 Matters

With its robust feature set, DevProxy 0.22 offers developers an efficient way to test API resilience and security. By focusing on local configurations and enhanced logging, this version reduces reliance on external services while improving usability and debugging efficiency.

For developers looking to optimize their API workflows, DevProxy 0.22 provides the tools needed to simulate real-world scenarios, identify potential issues, and enhance overall application reliability.