Kong / Kong/developer.konghq.com

[API GW 3.16] private_key_jwt auth support in Upstream OAuth plugin

Open
#6,817 0 comments 0 reactions 1 assignee Claimed by @lena-larionova View on GitHub
internal product:gateway
Dominant language
Ruby
Stars
28
Forks
121
Avg merge
1d 4h
Merged PRs (30d)
313

Description

## Definition of done

`private_key_jwt`auth method offers higher security over the currently allowed methods as it does not require sharing the `client_secret` string but only the public key.

To do:
* Write a plugin example
* Optional how-to

## Information
https://konghq.atlassian.net/browse/KAG-9048
https://github.com/Kong/kong-ee/pull/19741
https://konghq.aha.io/features/GTWY-515

## Due date (optional)
3.16 GA

## Size
M

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.