Kong / Kong/developer.konghq.com

Kong Identity: Implement JWT client authentication

Open
#4,472 0 comments 0 reactions 1 assignee Claimed by @juliamrch View on GitHub
internal product:kong-identity release-docs
Dominant language
Ruby
Stars
28
Forks
121
Avg merge
1d 4h
Merged PRs (30d)
313

Description

## Jobs to be done (optional)
Benefits
Enhanced Security: Using a private key for signing eliminates the need to transmit a client_secret over the network, reducing the risk of credential leakage.
Non-repudiation: The client cannot deny having made the request because it was signed with their unique private key.
Stateless Validation: Resource servers can validate the access token locally using the issuer's public key without needing to constantly check a central database, which improves performance and scalability in microservice architectures.

This mechanism is widely used in ecosystems like Open banking.

## Definition of done
- Convert draft from eng to how to or reference guide

## Information
DRP: Andrew J.
Aha: https://konghq.aha.io/features/KID-12

## Due date (optional)

## Size

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.