Skip to main content

Authentication plugins

The 19 http plugins of the Authentication category.

Authentication19​

  • authz-casbinAuthorizes requests with a Casbin model and policy.
  • authz-casdoorAuthenticates users against a Casdoor instance.
  • authz-keycloakAuthorizes requests with Keycloak's authorization services.
  • basic-authAuthenticates consumers with HTTP Basic credentials.
  • cas-authAuthenticates users against a CAS server.
  • dingtalk-authAuthenticates users with a DingTalk account through OAuth.
  • feishu-authAuthenticates users with a Feishu (Lark) account through OAuth.
  • forward-authDelegates authentication to an external service.
  • hmac-authAuthenticates requests signed with an HMAC key pair.
  • jwe-decryptDecrypts a JWE token from the request and forwards its payload.
  • jwt-authAuthenticates consumers with a JSON Web Token they present.
  • key-authAuthenticates consumers with an API key sent in a header or query parameter.
  • ldap-authAuthenticates consumers against an LDAP directory.
  • ldap-auth-advancedAuthenticates consumers against LDAP with a service-account bind and a user search.
  • multi-authAccepts any one of several authentication plugins.
  • opaAuthorizes requests with Open Policy Agent.
  • openid-connectAuthenticates users against an OpenID Connect provider.
  • saml-authAuthenticates users with a SAML identity provider.
  • wolf-rbacAuthorizes requests with wolf role-based access control.
G8 dev · Apache APISIX® 3.19.0
Apache, Apache APISIX and APISIX are trademarks of The Apache Software Foundation.