higress-group/higress

Higress网关集成安全认证,基于全局配置实现对接自定义鉴权服务

Open

#207 opened on Feb 21, 2023

 (4 comments) (1 reaction) (0 assignees)Go (1,219 forks)github user discovery
area/annotationgood first issuehelp wantedlevel/challengesig/controller

Repository metrics

Stars
 (9,036 stars)
PR merge metrics
 (Avg merge 7d 9h) (18 merged PRs in 30d)

Description

Why do you need it?

Is your feature request related to a problem? Please describe in details

Higress网关集成自定义鉴权服务,方便在网关入口处完成鉴权,避免每个后端服务都接入鉴权服务。接入安全认证。

How could it be?

A clear and concise description of what you want to happen. You can explain more about input of the feature, and output of it. Higress对接自建的中心化鉴权服务完成鉴权操作,Higress支持配置鉴权API的方式、或者其他便捷配置。 鉴权服务返回HTTP状态码为200,表明Token合法且Token有权限访问该后端资源,网关继续将原始业务请求转发给受保护的后端服务,收到业务响应后再次转发给客户端。

Contributor guide