https://github.com/approov/quickstart-kong_approov-plugin

Kong plugin to check Approov tokens.
https://github.com/approov/quickstart-kong_approov-plugin

api api-gateway api-secret api-security apigateway approov approov-demo approov-plugin approov-token jwt jwt-auth jwt-authentication jwt-tokens mobile mobile-api mobile-app-security mobile-first mobile-security security

Last synced: about 2 months ago
JSON representation

Kong plugin to check Approov tokens.

• Host: GitHub
• URL: https://github.com/approov/quickstart-kong_approov-plugin
• Owner: approov
• Created: 2020-04-15T12:11:03.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2023-09-14T10:29:37.000Z (over 1 year ago)
• Last Synced: 2024-04-14T17:01:26.269Z (9 months ago)
• Topics: api, api-gateway, api-secret, api-security, apigateway, approov, approov-demo, approov-plugin, approov-token, jwt, jwt-auth, jwt-authentication, jwt-tokens, mobile, mobile-api, mobile-app-security, mobile-first, mobile-security, security
• Language: Shell
• Homepage: https://docs.konghq.com/hub/critical-blue/approov/
• Size: 46.9 KB
• Stars: 0
• Watchers: 7
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# APPROOV TOKEN PLUGIN FOR KONG

Learn how to integrate [Approov](https://approov.io) in the [Kong API Gateway](https://konghq.com/kong/) by enabling the [Approov Token](https://www.approov.io/docs/latest/approov-usage-documentation/#approov-tokens) check with the native [Kong JWT plugin](https://docs.konghq.com/hub/kong-inc/jwt/), and the optional [Approov Token Binding](https://www.approov.io/docs/latest/approov-usage-documentation/#token-binding) check with the Approov plugin [included](/kong-plugin) in this repo.

## APPROOV QUICK START

For a quick start of integrating Approov in your current Kong API Gateway please follow this [guide](/docs/APPROOV_QUICK_START.md).

## APROOV DEMO

This [demo](/docs/APPROOV_KONG_PLUGIN_DEMO.md) has the goal of showing to both experienced and inexperienced Kong users how Approov can be integrated in the Kong API Gateway, and also includes the Approov Token Binding check, an advanced feature of Approov.

## KONG ADMIN

In order to setup the Approov Token check in the quick start and in the demo we have used the Kong Admin API via `curl` requests, just like it is done in the official docs for Kong.

### Step by Step

Read the [Step by Step](/docs/KONG_ADMIN_API_STEP_BY_STEP.md) guide for learning how to use the [./kong-admin](/bin/kong-admin.sh) helper script, that wraps the `curl` requests to interact with the Kong Admin API in order to setup the demo.

### Deep Dive

Take the [deep dive](/docs/KONG_ADMIN_API_DEEP_DIVE.md) to learn how to use the Kong Admin API with raw `curl` requests, and read the detailed explanations for each request.