December 2017
Intermediate to advanced
316 pages
6h 58m
English
Content preview from Building RESTful Web services with Go
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
API authentication in Kong
As we mentioned, an API gateway should take care of authentication for the multiple APIs running behind the gateway. Many plugins are available to provide authentication on the fly in Kong. In the next chapter, we will see the authentication concept in detail. For now, using these plugins, we can add authentication for a given API by calling the Kong admin API.
An API key-based authentication is becoming famous these days. Kong provides the following authentication patterns:
- API key-based authentication
- OAuth2 authentication
- JWT authentication
For the sake of simplicity, let us implement API key-based authentication. In simple words, key-based authentication allows an external client to consume the REST API with ...