OPA

Release date 2026/10/12

Bugfix

• Fixed an issue where Kong Gateway did not send an SNI to the OPA server. It now sends opa_host as the SNI when that is a hostname; with ssl_verify = true, the certificate must include opa_host.

Release date 2026/09/15

Feature

• Added WebSocket (ws/wss) protocol support. OPA is evaluated at handshake time before the connection is established.

Bugfix

• Fixed an issue where OPA decision headers could break the WebSocket handshake.

Release date 2026/10/14

Bugfix

• Fixed an issue where Kong Gateway did not send an SNI to the OPA server. It now sends opa_host as the SNI when that is a hostname; with ssl_verify = true, the certificate must include opa_host.

Release date 2026/04/28

Bugfix

• Fixed json body processing to recognize application/json content-type with charset, ensuring proper handling of JSON request bodies.

Release date 2026/04/07

Bugfix

• Fixed json body processing to recognize application/json content-type with charset, ensuring proper handling of JSON request bodies.

Release date 2026/06/30

Bugfix

• Fixed json body processing to recognize application/json content-type with charset, ensuring proper handling of JSON request bodies.

Release date 2025/12/18

Feature

• added support for the tls_certificate_verify global option. When this option is enabled, the plugin’s ssl_verify setting cannot be disabled.

Release date 2026/07/22

Bugfix

• Fixed json body processing to recognize application/json content-type with charset, ensuring proper handling of JSON request bodies.

Release date 2026/06/30

Bugfix

• Fixed json body processing to recognize application/json content-type with charset, ensuring proper handling of JSON request bodies.

Release date 2026/05/14

Bugfix

• Fixed json body processing to recognize application/json content-type with charset, ensuring proper handling of JSON request bodies.

Release date 2023/02/28

Feature

• This plugin can now handle custom messages from the OPA server.

Release date 2022/12/06

Feature

• Added the include_uri_captures_in_opa_input field. When this field is set to true, the regex capture groups captured on the Kong Gateway route’s path field in the current request (if any) are included as input to OPA.

Bugfix

• Removed redundant deprecated code from the plugin.

Release date 2022/09/09

Feature

• New configuration parameter include_body_in_opa_input: When enabled, include the raw body as a string in the OPA input at input.request.http.body and the body size at input.request.http.body_size.

• New configuration parameter include_parsed_json_body_in_opa_input: When enabled and content-type is application/json, the parsed JSON will be added to the OPA input at input.request.http.parsed_body.