apache / apisix

The Cloud-Native API Gateway
https://apisix.apache.org/blog/
Apache License 2.0
14.3k stars 2.49k forks source link

help request: failed to check the configuration of plugin multi-auth err: openid-connect plugin is not supported #11514

Open jonathan-dev opened 3 weeks ago

jonathan-dev commented 3 weeks ago

Description

The documentation for the multi-auth plugin says:

This plugin provides a flexible authentication mechanism by iterating through the list of authentication plugins specified in the auth_plugins attribute. It allows multiple consumers to share the same route while using different authentication methods. For example, one consumer can authenticate using basic authentication, while another consumer can authenticate using JWT.

However when setting it up with openid-connect (which to my knowledeg is a auth plugin) I get the following message: {"error_msg":"failed to check the configuration of plugin multi-auth err: openid-connect plugin is not supported"}

Is the openid-connect some kind of exception?

Environment

I am using this docker image: apache/apisix:3.9.1-redhat

jonathan-dev commented 3 weeks ago

Same for the authz-keycloak plugin: {"error_msg":"failed to check the configuration of plugin multi-auth err: authz-keycloak plugin is not supported"}

jonathan-dev commented 3 weeks ago

I just looked at the source of the plugin and it seems like the problem is just that the open-idconnect plugin doesn't have the type set to "auth" in its _M object. Is that the only problem? Or are there other issues related because the plugin does authentication in a different way to the other plugins? They just seem to return nil on their rewrite method if the request is fine.