kong-plugin-jwt-keycloak
kong-plugin-jwt-keycloak copied to clipboard
A Kong plugin to validate access tokens issued by Keycloak
based on the new kong upgrade, the handler declaration and the schema declaration were fixed https://docs.konghq.com/gateway/latest/upgrade/
Hi, first thanks for this plugin. One feature I love is the ability to match the consumer in kong, but I cannot make it working: I set the "consumer_match" and...
Hi friends!, I've implement this plugin and I wish to know how can I apply differents roles in function of its method’s names or service's name. I mean. I've two...
Thanks for developing this plugin! We are planning to use Kong deployed in Kubernetes in DBless mode. I see all of the examples use the admin API, from what I...
> _At least in Kong version 2.4.0, you may also need to add the line "```plugins = bundled,jwt-keycloak```" in Kong configuration (e.g. ```kong.conf``` file), and restart Kong (```kong restart``` command)....
Can anyone help me in understanding how can we use this plugin in combination with kong-oidc? https://github.com/nokia/kong-oidc If it works, then it would be full end-end in my guess. Getting...
Hello, I'm wondering if the plugin currently supports Keycloak's [authorization services](https://www.keycloak.org/docs/latest/authorization_services/index.html) and if not, are there any plans to do so in the near future? Thanks.
Hi. thank you for a great plugin. I want the service to be available when both scopes are in the token (for example opened view_profile) but I read the Readme...
Using custom key during caching also requires a custom handler for proper invalidation. Adresses #28
Hi, Caching using custom cache key ([link](https://github.com/gbbirkisson/kong-plugin-jwt-keycloak/blob/5f4b6cb2b067da3a473b7377abd7057ad06172e8/src/handler.lua#L217)) ```lua consumer_cache_key = "custom_id_key_" .. consumer_id consumer, err = kong.cache:get(consumer_cache_key, nil, load_consumer_by_custom_id, consumer_id, true) ``` prevents Kong from proper automatic invalidation of corresponding...