For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.
Keycloak
Protect routes with Keycloak as the identity provider, using either browser login or API token validation.
Keycloak setup
Deploy Keycloak, register kgateway as an OAuth2 client, and give the gateway a network path to reach …
Authorization code flow
Redirect browser users to Keycloak to log in, then store their tokens in session cookies.
Access token validation
Validate an access token that an API client already holds, and reject requests without a valid one.
Was this page helpful?