Create a Dockerfile for our Kong image with the kong-oidc plugin.We'll be running through the following steps in this section: The areas of interest for this section are circled below: This section focus on setting up the Kong API Gateway, as well as the configurations necessary to access our backend API through the proxy. First, pick a base directory and create a child directory where we'll store the code for our infrastructure: $ mkdir api-gw-infra We'll flesh out this diagram in the next post with how the applications communicate with each other, and the order in which they do it to implement OIDC. You're familiar with the terminal, and understand how curl and pipes work.īelow is a diagram of what we're trying to accomplish:.If you'd like to see an Android version of this, please leave a comment below stating so. Mobile app is iOS, so you will need xCode.Running on Mac, or Linux (though this can all be adopted for Windows easily enough since we're using Docker).This is a dense post, so grab your beverage of choice and get comfortable! Assumptions Finally, in the third part, we will get them all working together. In the second part, we will create a simple mobile application. In the first part, we will setup Kong and Keycloak so that they can work together to protect a backend server that we try to access from a web browser through Kong. I will not be covering the steps you need to take to secure your network. This will allow us to easily inspect network traffic with Wireshark. Please keep in mind that the following configuration is suitable for local development purposes only. I will also be using Docker Compose to build the infrastructure. AppAuth - Native App SDK for OAuth 2.0 and OpenID Connect.Keycloak - A OpenID Connect Provider (OP).Kong - An API Gateway (community edition is open source and free).If you're not familiar with these technoligies here's a very brief overview: I'll be using Kong, Keycloak, and AppAuth. In this post, I'll share with you what I've learned throughout the process. Particularly, I'm interested in how this can be used in conjunction with mobile applications. Lately, I've been working on building infrastructure to implement OpenID Connect/OAuth2.0 in an API Gateway architecture using mostly open source or free software.
0 kommentar(er)
