Josh Blakeley

Like this a lot - I think it would probably be better to add two new functions to the JSVM i.e. TykMakeHttpRequestWithTimeout so we can ensure we keep backwards compatibility....

Sorry if i'm being dumb but isn't the point of the operator that *IT* is the API owner and RBAC is then pushed into the kubernetes space by namespace access...

Great thanks for the clarification both!

Hey @senolatac Yes you're in custom plugin territory at this point. You can change the key objects directly from the plugin so can increment the quota counter by each of...

Yep you can use plugins in cloud with the caveat that we need to load the code from trusted sources so you use our Mserv tool to get your custom...

On the cloud gateways hosted by Tyk it's just javascript and python currently (and Go too but it's a little more experimental) - though if you run a hybrid gateway...

@buger how do i remove all the crap i've accidentally pulled in to the PR?

This is a *soft* change. We now have optional PKCE under the hood. We will open another PR after this is merged to configure mandatory PKCE in oauth settings as...

I broke this branch real good - might open a new one. Putting this in draft again for now

Ok fixed and rebased on master