FIWARE / kong-plugins-fiware

Kong plugin to support attribute-based access management for NGSI requests with the iSHARE scheme
MIT License
4 stars 0 forks source link

Is it possible to have a PEP_PROXY_PUBLIC_PATHS like Wilma Pep #27

Open konstantinosGombakis opened 11 months ago

konstantinosGombakis commented 11 months ago

I want to protect my Orion-LD with the kong-pep-plugin but to expose the orion-ld:1026/version without authentication? Is it possible to achieve than with Kong?

wistefan commented 11 months ago

Hi, yes. You could just configure a route that does not use the plugin for version and another one for the other endpoints:

 services:
      - host: "orion"
        name: "orion-version"
        port: 1026
        protocol: http

        routes:
          - name: orion
            paths: 
              - /version
              - 
      - host: "orion"
        name: "orion"
        port: 1026
        protocol: http

        routes:
          - name: orion
            paths: 
              - /ngsi-ld
            plugins:
             - name: pep-plugin
                 ....