envoyproxy / envoyproxy/gateway

OIDC Client JWT support

Open
#7,122 1 comment 1 reaction 0 assignees View on GitHub
stale triage
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

*Description*:

https://github.com/keycloak/keycloak/releases/tag/26.4.0 was just released with:
* Federated Client Authentication to use SPIFFE or Kubernetes service account tokens for client authentication.

I'd like to be able to use jwt tokens from a SPIFFE endpoint or Kubernetes projected jwt token as the client secret instead of a hardcoded one. This would eliminate the need to configure a password at all, and allow short lived tokens to be automatically generated and used for securing this communication channel.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.