I am using openid-connect to login Kong Manager and Dev Portal, but I am encountering a login issue. How could I check what is the id token and access token used in the login procedure?
how to get id token and access token used for Kong Manager or Dev Portal login
How do I find the id token and access token used for Kong Manager or Dev Portal OpenID Connect login?
Add downstream_id_token_header and downstream_access_token_header to your admin_gui_auth_conf/KONG_ADMIN_GUI_AUTH_CONF (Kong Manager) or portal_auth_conf/KONG_PORTAL_AUTH_CONF (classic Dev Portal), restart Kong, then log in and inspect the id-token and access-token response headers in your browser’s network tab. Note: the classic Dev Portal is hard-deprecated and license-gated on current Kong Gateway Enterprise, so the Dev Portal steps are likely non-functional for most current customers.
Steps
-
For the case you are using openid-connect to login Kong Manager
-
Please add below 2 parameters to
admin_gui_auth_conforKONG_ADMIN_GUI_AUTH_CONF"downstream_id_token_header": "id-token" "downstream_access_token_header": "access-token" -
Restart Kong
-
Login Kong Manager by using Chrome
Keep opening the “Network” tab of “Developer Tools” in this procedure,
Find below API and check its response header.
http(s)://<kong>:<kong-admin-api-port>/auth?state=xxx&session_state=yyy&code=zzzThen we will find the id-token response header shows the id token,
the access-token response header shows the access token.
-
-
For the case you are using openid-connect to login Dev Portal
Note: the classic Dev Portal is hard-deprecated and license-gated on current Kong Gateway Enterprise, so this section is very likely non-functional for most current customers. The Kong Manager steps above remain fully valid.
-
Please add below 2 parameters to
portal_auth_conforKONG_PORTAL_AUTH_CONF"downstream_id_token_header": "id-token" "downstream_access_token_header": "access-token" -
Restart Kong
-
Login Dev Portal by using Chrome
Keep opening the “Network” tab of “Developer Tools” in this procedure,
Find below API and check its response header.
http(s)://<kong>:<dev-portal-api-port>/<workspace>/sessionThen we will find the id-token response header shows the id token,
the access-token response header shows the access token.
-