Centralized Authentication with Apache APISIX and Ory
summary
Shows a working integration of Apache APISIX with Ory Hydra using the APISIX OpenID Connect plugin to centralize API auth. Uses a docker-compose demo to start APISIX, Hydra and a product API, creates an OAuth client, configures an upstream and route, and exercises both authorization-code (browser login + consent) and client_credentials flows. Plugin obtains and introspects tokens successfully so routes require valid access tokens. Useful if wanting a concrete, runnable APISIX+Hydra setup.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:02API authentication basics
- 2:30API Gateway role
- 3:32Apache APISIX overview
- 5:14Centralized auth benefits
- 6:18Ory Hydra introduction
- 8:03Demo setup
- 12:37Configure upstream service
- 13:40Create route with OIDC
- 15:05Test authentication flow
- 16:28Machine-to-machine auth
- 17:33Update plugin config
- 18:16Enable client credentials
- 18:39Final security test
- 19:57Demo wrap-up
- 20:18Q&A session
related talks
35mEvolving your APIs, a step-by-step approach
12mSimpler and more flexible Kubernetes Ingress: Apache APISIX
24mA Hands-On Introduction to the Kubernetes Gateway API with Apache APISIX
38mEvolving your APIs, a Pragmatic Approach
45mAPI Security: Acting Now to Enable Security Controls
30mSecure Apache Ozone with High Availability
14mSingle Sign-On in 15 Minutes Without Changing Your Code
22mSumUp's Self service OIDC for with Ory Hydra and Terraform