Key Auth

Release date 2026/09/15

Bugfix

• Fixed an issue where an invalid API key was not falling back to the configured anonymous consumer when principals.error_on_miss was set to false, unlike every other authentication failure.

Release date 2026/09/16

Bugfix

• Fixed an issue where an invalid API key was not falling back to the configured anonymous consumer when principals.error_on_miss was set to false, unlike every other authentication failure.

Release date 2026/07/02

Feature

• Added support for authentication via the Kong Identity service with caching, consumer compatibility, and basic analytics.

Bugfix

• Fixed an issue where a null value was accidentally blocked on identity_realms.

Release date 2025/12/18

Bugfix

• Fixed an issue where the consumer authentication cache was not isolated by realm.

Release date 2025/07/03

Bugfix

• Fixed an issue where external consumers could not be used with traditional Kong deployments, such as with KIC.

• Fixed an issue where region was not permitted to be null for remote identity realms.

Release date 2026/05/14

Bugfix

• Fixed an issue where region was not permitted to be null for remote identity realms.

Release date 2025/07/06

Bugfix

• Fixed an issue where external consumers could not be used with traditional Kong deployments, such as with KIC.

Release date 2025/03/27

Bugfix

• Improved the error message which occurred when an anonymous consumer was configured but did not exist.

Release date 2024/12/12

Bugfix

• Fixed to retain order of query arguments when hiding the credentials.

Release date 2024/09/11

Bugfix

• Fix an issue of realm field not recognized for older kong versions (before 3.7)

Release date 2024/06/18

Bugfix

• Fix an issue of realm field not recognized for older kong versions (before 3.7)

Release date 2024/05/28

Bugfix

• Added WWW-Authenticate headers to all 401 responses in the Key Auth plugin.

Release date 2023/11/08

Bugfix

• Enhance error responses for authentication failures in the Admin API

Release date 2023/02/28

Feature

• Improved Plugin Documentation: Revised docs for the following plugins to include examples:

  • CORS
  • File Log
  • HTTP Log
  • JWT Signer
  • Key Auth
  • OpenID Connect
  • Rate Limiting Advanced
  • SAML
  • StatsD

• Improved Plugin Documentation: Key Auth

Release date 2022/09/09

Breaking Change

• Updated the priority for some plugins.: key-auth changed from 1003 to 1250