How to use Kong Oauth2 plugin to secure your API

This is my first attempt to make videos related to Kong so I might forget to mention a lot of details that I should have covered. Kong is a relatively complicated product, let me know what you want me to cover (deployment, plugins, settings etc.) in future videos.
Please leave your comment and give me some feedback to help me improve.
Thank you.

[@dragon3602010]

Hello, is there something equivalent with Traefik ?
I like to use fastapi with Traefik to get the "https", so does Oauth2 can be integrated ?
Thanks

[@liyangau]

HI Mikey, unfortunately Traefik does not do this on its own. It does have Oauth2 Token introspection on their Enterprise version, however, Traefik itself can't be used to generate access_tokens. You need to integrate third party IDP to use this feature.
Kong on the other hand supports Oauth2 on its own and it is free. You can also use https with Kong.
Another option is to use Traefik as reverse proxy to handle HTTPs and hide Kong behind it.

[@dragon3602010]

@@liyangauah oki thanks and is it easy to do it? I mean what's the difference to handle oauth from Fastapi itself?

[@ummerirshad5813]

Suppose am creating a project with Kong API Gateway (Community), do I need to register my end users as kong consumers? Also, can we handle RBAC with kong ACL plugin?

[@asifshapnil9262]

how to work with keycloak and outh2 for kong. Can you make any video?

[@liyangau]

That requires Enterprise OIDC plugin. I have a couple blog posts for that. I haven't made a video yet because I don't know how many viewers have Enterprise license.