OAuth 2.0 Introspection

Kong Gateway 3.8.x

• Fixed an issue where the Consumer’s cache couldn’t be invalidated when the OAuth2 Introspection plugin used client_id as config.consumer_by.

Kong Gateway 3.6.x

• Added support for Consumer Group scoping by using the PDK kong.client.authenticate function.
• The config.authorization_value configuration parameter can now be encrypted.

Kong Gateway 3.4.x

• Fixed an issue where the plugin failed when processing a request with JSON that is not a table.

Kong Gateway 3.0.x

• The deprecated X-Credential-Username header has been removed.