envoyproxy / envoyproxy/gateway

Enable the OAuth2 credential injector HTTPFilter

Open
#8,780 5 comments 2 reactions 0 assignees View on GitHub
help wanted kind/feature
Dominant language
Go
Stars
3k
Forks
864
Avg merge
1d 22h
Merged PRs (30d)
148

Description

*Description*:
Currently the Envoy Gateway only allows to use the Credential Injector for Basic Auth with Proxied Requests to upstream. But what if we need JWT Tokens? Sure, there is the generic_secret and you can use a Kubernetes Secret to insert a JWT for Bearer auth - BUT: what if the tokens need to be refreshed regularly? There actually is an oauth2 credential injector according to the envoy proxy docs, but one cannot use it yet on the gateway, as the Envoy API Extensions only allows for a secret ref, not the configuration we'd need.

[optional *Relevant Links*:]
* [Oauth2 Credential Injector](https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/credential_injector_filter#oauth2-credential-injector-client-credential-grant)
* [Envoy Gateway API Extentions](https://gateway.envoyproxy.io/v1.5/api/extension_types/#injectedcredential)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.