Skip to content
No description, website, or topics provided.
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
kong/plugins/kong-axiomatics-plugin
.gitignore gitignore file for the DS_Store files Jan 24, 2019
Dockerfile
README.md
docker-compose.yml
kong-axiomatics-plugin-0.1-1.rockspec Refactoring tabs Feb 1, 2019

README.md

Kong Axiomatics

A plugin that integrates Kong with an Axiomatics PDP endpoint.

Description

Before proxying the request to an API upstream of Kong, this plugin will send a XACML JSON POST request to an Axiomatics PDP endpoint and based on the response determine whether to proceed or return.

Installation

With a local instance of Kong

Clone this repo

$ git clone https://github.com/ioannis-iordanidis/kong-axiomatics-plugin
$ cd kong-axiomatics-plugin
$ luarocks make *.rockspec

You will also have to add the kong-axiomatics-plugin in your configuration file. If you are starting from the default kong.conf file uncomment the plugins key and add this one

plugins = bundled, kong-axiomatics-plugin

Restart Kong using this configuration file and you're ready to go

kong stop
kong start -c /etc/kong/kong.conf

With docker

Build and start Kong

docker-compose build --force-rm && docker-compose up -d

Stop Kong as well as remove Docker volume to be able to start from scratch

docker-compose down -v

Configuration

Form Parameter Required Default Description
config.pdp_url yes The URL to which the plugin will make a JSON POST request before proxying the original request.
config.token_header_name yes Authorization The name of the header that carries the JWT
config.claims_to_include no A list of strings that correspond to the claims we are interested in forwarding to the PDP from the JWT

Author

Ioannis Iordanidis

License

The MIT License (MIT)
=====================

Copyright (c) 2019 Ioannis P. Iordanidis

The software is provided "as is", without warranty of any kind, express or
implied, including but not limited to the warranties of merchantability,
fitness for a particular purpose and noninfringement. In no event shall the
authors or copyright holders be liable for any claim, damages or other
liability, whether in an action of contract, tort or otherwise, arising from,
out of or in connection with the software or the use or other dealings in
the software.
You can’t perform that action at this time.