The Kong OIDC plugin is an OpenID Connect Relying Party (RP) implementation for the Kong API gateway. It authenticates users against an OpenID Connect Provider using the Authorization Code flow and supports token introspection for Bearer tokens. The plugin maintains user sessions and adds headers (X-Userinfo, X-Access-Token, X-ID-Token) to the upstream request for use by backend services. The plugin follows a modular architecture with separate modules for handling the main logic (handler.lua), request filtering (filter.lua), session configuration (session.lua), and utility functions (utils.lua). It relies on the `lua-resty-openidc` library for the core OIDC protocol handling. Key features include configurable session storage (client-side cookie or server-side via shared memory, memcache, or Redis), caching of discovery documents and access tokens, and support for both authentication and token introspection modes. Note: This repository is not maintained and is not recommended for use in production, as indicated in the README. The last commit history shows no recent activity, and dependencies are outdated relative to current Kong and OIDC library versions.
This is the Katana project: Microsoft's implementation of the OWIN (Open Web Interface for .NET) specification for .NET Framework. It provides a middleware pipeline, hosting infrastructure (self-host via HttpListener and IIS integration via System.Web), and a rich set of middleware including static files, diagnostics, CORS, and an extensive authentication/authorization suite covering cookies, OAuth 2.0, OpenID Connect, WS-Federation, JWT, and social providers (Google, Facebook, Twitter, Microsoft Account). The architecture is built around the OWIN environment dictionary flowing through composable middleware. Key entry points include `WebApp.Start()` for programmatic hosting, `OwinHttpHandler`/`OwinHttpModule` for IIS integration, and the `OwinHost.exe` command-line tool. The codebase is well-architected with patterns like `AuthenticationHandler<T>` base class, `IAppBuilder` extensions, and service abstraction interfaces, but it is deprecated in favor of ASP.NET Core. It targets .NET Framework 4.5 exclusively and uses legacy package management (`packages.config`). While the core patterns remain instructive, the library is not directly reusable for modern .NET development without significant porting.
This repository is a meta-project for a Spring Cloud microservices demo, now superseded by the Opensabre framework. It contains no actual source code; instead, it aggregates several external submodules (opensabre-framework, base-authorization, base-organization, base-gateway, etc.) via Git submodules. The root pom.xml defines dependencies for Spring Boot 2.1.10, Spring Cloud Greenwich, and Alibaba Cloud 2.1.0, all of which are outdated. The README explicitly states that the project has been replaced by a newer version. As a standalone repository, it provides no reusable code or components; it serves only as a historical reference or a pointer to the submodules. The repository is effectively deprecated and should not be used for new projects.