通过 Keycloak 进行 Orion API 身份验证

Question

I want to add authentication on my Orion APIs through my Keycloak IdM. I know it is possible to use Orion together Pep Proxy Wilma and Keyrock to do this task, and a possible workaround can be to integrate keyrock with keycloak at thislink (7 years ago).

Do you have some news or suggestion about this?

Thank you in advance.

Answer 1

there is a (relatively new) solution available. Instead of Wilma, you can use the Kong-API-Gateway as a PEP-Proxy with the FIWARE-PEP-Plugin . That way, authentication(and authorization) can be delegated to Keycloak. You can find more on that in those 2 presentations:

• https://github.com/wistefan/presentations/blob/main/summit-gran-canaria/kong/FGS22-Kong.pdf https://github.com/wistefan/presentations/blob/main/summit-gran-canaria/keycloak/FGS22-Keycloak.pdf