This message was deleted.
# announcementss
Slackbot
04/20/2021, 3:49 PMThis message was deleted.
c
Chaoyu
04/20/2021, 3:51 PMIt’s very common to use a proxy server in front of api server to handle authentication and rate limiting for security
Chaoyu
04/20/2021, 3:52 PMBtw what environment are you deploying to? Is it on aws ec2, a K8s cluster or something else?
g
Guillermo Alvarado
04/20/2021, 3:53 PMRight now the project is considered a PoC and it will be in a Docker host
Guillermo Alvarado
04/20/2021, 3:56 PMI was thinking take a look to Kong API Gateway to solve this, I know I can put an nginx to handle https but I still need auth...just trying to choose a tool that provide both of them
Guillermo Alvarado
04/20/2021, 3:57 PMMaybe just HTTP Basic Authentication from nginx do the trick
c
Chaoyu
04/20/2021, 5:49 PMNginx supports many authentication mechanism via plugin, JWT is also a good option for this. If your team is already using Kong, it’s definitely going to make this easier, cc @Guanlan Dai
g
Guanlan Dai
04/20/2021, 5:56 PMHi @Guillermo Alvarado , I’m the engineering lead behind Kong, you can find a detailed guide to enable JWT for your API with Kong: https://konghq.com/blog/jwt-kong-gateway
👍 2
Guanlan Dai
04/20/2021, 5:57 PMAlso Kong can handle HTTPS with Let’s Encrypt or any other ACMEv2 intergation, and tons of other auth plugins include basic auth: https://docs.konghq.com/hub/#authentication
👍 2
g
Guillermo Alvarado
04/21/2021, 4:07 PMThanks folks @Guanlan Dai@Chaoyu!