https://www.javiercd.es/en/posts/kong/plugins-autenticacion/14-autenticacion-oauth2-introspection/Recent content in OAuth 2.0 Token Introspection in Kong Gateway on AtlasHugo -- gohugo.ioenSun, 26 Jul 2026 00:00:00 +0200https://www.javiercd.es/en/posts/kong/plugins-autenticacion/14-autenticacion-oauth2-introspection/14-autenticacion-oauth2-introspection/Sun, 26 Jul 2026 00:00:00 +0200https://www.javiercd.es/en/posts/kong/plugins-autenticacion/14-autenticacion-oauth2-introspection/14-autenticacion-oauth2-introspection/<p>Kong Enterprise includes an official OAuth 2.0 Introspection plugin, but it requires a license. In this lab, we will overcome that limitation by installing an open community or free-software plugin on Kong Gateway 3.10.</p> <p>In addition to the plugin, we will deploy Keycloak in Kubernetes. Keycloak will issue access tokens through <code>client_credentials</code> and expose the introspection endpoint defined by RFC 7662. Every response shown in this article comes from this real scenario.</p>