Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

How can a web page call API protected by kong-oidc? #192

Open
devgodman opened this issue Feb 7, 2021 · 2 comments
Open

How can a web page call API protected by kong-oidc? #192

devgodman opened this issue Feb 7, 2021 · 2 comments

Comments

@devgodman
Copy link

devgodman commented Feb 7, 2021 •
edited
Loading

Is it feasible to allow web app invoking API protected by kong-oidc to login from IdP and get resources provided by backend?
@devgodman devgodman changed the title How can a web page call API protected by How can a web page call API protected by kong-oidc? Feb 7, 2021
@Butterneck
Copy link

Hi, did you manage to solve? I have the same problem

@Darguelles
Copy link

Hey, sure you can. The client need to store the session cookie returned by Kong and send it on each request. Then, depending on your session storage the plugin will get the JWT and attach it into the authorization header for the backend service.

You have a functional example using Kong + OpenID + Keycloak here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@Darguelles @Butterneck @devgodman