Public Ideas Portal
Is it would be possible to have a OpenID Connect policy in Kuma / Mesh as it is done in Kong Gateway.
- As several exchanges between services won't go through the gateway each service will need to validate the token it will receive. If the mesh could provide a policy it would avoid to reimplement the logic in every service.
- In our case, as the communication will be between two application, we are using the client credentials flow. We will need to validate that the token used by the client is valid to access to the consumed application.
- Validate the token in the mesh would provide a standard way to do it
