You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Nov 28, 2025. It is now read-only.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The message "HTTP 500 Response Body Too Large" for the new max response body size may be inaccurate; 413 Payload Too Large might be more appropriate. Confirm the actual status code returned by Gateway to avoid misleading docs.
### http_server_options.max_response_body_size
ENV: <b>TYK_GW_HTTPSERVEROPTIONS_MAXRESPONSEBODYSIZE</b><br />
Type: `int64`<br />
MaxResponseBodySize configures an upper limit for the size of the response body (payload) in bytes.
This limit is currently applied only if the Response Body Transform middleware is enabled.
The Gateway will return `HTTP 500 Response Body Too Large` if the response payload exceeds MaxResponseBodySize+1 bytes.
A value of zero (default) means that no maximum is set and response bodies will not be limited.
The cacheTimeout field for JWKS changed from int64 to string; verify unit/format (e.g., seconds, duration like "30s") and add an example to prevent ambiguity for users.
**Field: `cacheTimeout` (`string`)**
CacheTimeout defines how long the JWKS will be kept in the cache before forcing a refresh from the JWKS endpoint.
In CustomPlugin docs, several sentences could be clearer (e.g., "FunctionName is the name of authentication method" and references to otto/goplugin). Consider clarifying supported runtimes and when fields apply.
### **CustomPlugin**
CustomPlugin configures custom plugin.
**Field: `enabled` (`boolean`)**
Enabled activates the custom plugin.
Tyk classic API definition: `custom_middleware.pre[].disabled`, `custom_middleware.post_key_auth[].disabled`,.
`custom_middleware.post[].disabled`, `custom_middleware.response[].disabled` (negated).
**Field: `functionName` (`string`)**
FunctionName is the name of authentication method.
Tyk classic API definition: `custom_middleware.pre[].name`, `custom_middleware.post_key_auth[].name`,.
`custom_middleware.post[].name`, `custom_middleware.response[].name`.
**Field: `path` (`string`)**
Path is the path to shared object file in case of goplugin mode or path to JS code in case of otto auth plugin.
Tyk classic API definition: `custom_middleware.pre[].path`, `custom_middleware.post_key_auth[].path`,.
`custom_middleware.post[].path`, `custom_middleware.response[].path`.
**Field: `rawBodyOnly` (`boolean`)**
RawBodyOnly if set to true, do not fill body in request or response object.
Tyk classic API definition: `custom_middleware.pre[].raw_body_only`, `custom_middleware.post_key_auth[].raw_body_only`,.
`custom_middleware.post[].raw_body_only`, `custom_middleware.response[].raw_body_only`.
**Field: `requireSession` (`boolean`)**
RequireSession if set to true passes down the session information for plugins after authentication.
RequireSession is used only with JSVM custom middleware.
Tyk classic API definition: `custom_middleware.pre[].require_session`, `custom_middleware.post_key_auth[].require_session`,.
`custom_middleware.post[].require_session`, `custom_middleware.response[].require_session`.
Latest suggestions up to bc043cf
Explore these optional code suggestions:
Category
Suggestion
Impact
Possible issue
Correct status code and threshold
Clarify the exact status code and threshold semantics to avoid misleading operators. If the Gateway actually returns 413 (Payload Too Large) or does not add +1 byte, document the precise behavior and remove the ambiguous "+1".
-The Gateway will return `HTTP 500 Response Body Too Large` if the response payload exceeds MaxResponseBodySize+1 bytes.+The Gateway will return `HTTP 413 Payload Too Large` if the response payload exceeds `MaxResponseBodySize` bytes.
Suggestion importance[1-10]: 7
__
Why: If the actual behavior is 413 without a +1 threshold, this correction prevents operator confusion; however, without code context it's a documentation clarification rather than a confirmed bug fix.
Medium
General
Fix invalid type notation
Use consistent, valid type notation to prevent misconfiguration. Replace the mixed list with a clear description that values may be strings, numbers, booleans, or arrays of those.
Why: The proposed notation is clearer and consistent with human-readable docs, improving usability, though the change is minor and stylistic.
Low
Document duration format precisely
Specify the expected duration format to avoid runtime errors. Indicate whether cacheTimeout uses a Go-style duration (e.g., "30s", "5m") or a numeric string of seconds.
-**Field: `cacheTimeout` (`string`)**+**Field: `cacheTimeout` (`string`, Go duration like "30s", "5m", "1h")**
Suggestion importance[1-10]: 6
__
Why: Clarifying expected duration format reduces misconfiguration risk; impact is moderate as it's documentation detail without verified runtime change.
Replace the leaked Go type/debug string with a reader-friendly type description. This prevents exposing internal implementation details and improves clarity.
Why: The displayed Go AST debug type is an internal artifact; replacing it with a reader-friendly type like array<any> corrects confusing documentation and improves clarity.
Medium
Reinstate keying by operationID
Restore the explanation that the map is keyed by operationID to avoid ambiguity for readers. Clarify the uniqueness requirement for operation identifiers.
-+Operations holds Operation definitions.+Operations holds Operation definitions. The string key in this object is the `operationID`, which is a unique identifier for each API operation.
Suggestion importance[1-10]: 6
__
Why: The PR removed the detail that the map is keyed by operationID; restoring it clarifies usage, though it’s a documentation clarity improvement rather than a functional fix.
Low
Possible issue
Fix mismatched inline code delimiters
Fix the mismatched backtick/quote around the base address to prevent rendering issues and confusion. Ensure all inline code spans use matching backticks.
-For example, consider the scenario where the Tyk base address is `http://acme.com/', the listen path is `example/` and the upstream URL is `http://httpbin.org/`:+For example, consider the scenario where the Tyk base address is `http://acme.com/`, the listen path is `example/` and the upstream URL is `http://httpbin.org/`:
Suggestion importance[1-10]: 7
__
Why: The new text has a mismatched backtick/quote in the URL code span at line 595; fixing it improves correctness and rendering without altering meaning.
andyo-tyk
changed the title
[TT-15980] Gateway Update documentation for 5.10.1
[TT-15980, TT-7735] Gateway Update documentation for 5.10.1
Oct 29, 2025
andyo-tyk
changed the title
[TT-15980, TT-7735] Gateway Update documentation for 5.10.1
[TT-15980] Gateway Update documentation for 5.10.1
Oct 29, 2025
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Triggered by: jay-deshmukh
Included:
Tyk Gateway: true
Tyk Dashboard: false
Tyk MDCB false
Tyk Pump false
Intended for: master
Changes sourced from: release-5.10.1
Config info generator branch: main
Note: GW docs for 5.10.1 (branch suffix: docs)
JIRA: https://tyktech.atlassian.net/browse/TT-15980