You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/proposals/authentication-filter.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -478,7 +478,7 @@ http {
478
478
For JWT Auth, there are two options.
479
479
480
480
1. Local JWKS file stored as a Secret
481
-
2. Remote JWKS from an IdP provider like Keycloak
481
+
2. Remote JWKS from an IdP provider like KeyCloak
482
482
483
483
#### Example JWT AuthenticationFilter with Local JWKS
484
484
@@ -650,7 +650,7 @@ http {
650
650
651
651
These are some directives the `Remote` mode uses over the `File` mode:
652
652
653
-
- `auth_jwt_key_request`: When using the `Remote` mode, this is used in place of `auth_jwt_key_file`. This will call the `internal` NGINX location `/_ngf-internal_jwks_uri` to redirect the request to the external auth provider (e.g. Keycloak)
653
+
- `auth_jwt_key_request`: When using the `Remote` mode, this is used in place of `auth_jwt_key_file`. This will call the `internal` NGINX location `/_ngf-internal_jwks_uri` to redirect the request to the external auth provider (e.g. KeyCloak)
654
654
- `proxy_cache_path`: This is used to configure caching of the JWKS after an initial request, allowing subsequent requests to avoid re-authentication for a time
655
655
656
656
```nginx
@@ -911,7 +911,7 @@ This scenario can use the status `RouteConditionPartiallyInvalid` defined in the
911
911
912
912
The Gateway API defines a means to standardise authentication through use of the [HTTPExternalAuthFilter](https://gateway-api.sigs.k8s.io/reference/spec/#httpexternalauthfilter) available in the HTTPRoute specification.
913
913
914
-
This allows users to reference an external authentication service, such as Keycloak, to handle the authentication requests.
914
+
This allows users to reference an external authentication service, such as KeyCloak, to handle the authentication requests.
915
915
While this API is available in the experimental channel, it is subject to change.
916
916
917
917
Our decision to go forward with our own `AuthenticationFilter` was to ensure we could quickly provide authentication to our users while allowing us to closely monitor progress of the ExternalAuthFilter.
0 commit comments