https://www.javiercd.es/en/posts/kong/plugins-autenticacion/17-autenticacion-session/Recent content in Session in Kong Gateway on AtlasHugo -- gohugo.ioenSun, 26 Jul 2026 00:00:00 +0200https://www.javiercd.es/en/posts/kong/plugins-autenticacion/17-autenticacion-session/17-autenticacion-session/Sun, 26 Jul 2026 00:00:00 +0200https://www.javiercd.es/en/posts/kong/plugins-autenticacion/17-autenticacion-session/17-autenticacion-session/<p>The Session plugin lets an authenticated client reuse its identity through a cookie. It does not authenticate clients on its own and must work alongside another mechanism that validates the first request.</p> <p>This lab combines Session with Key Auth. The first request presents an API key, Kong creates a session, and later requests use only the cookie. We also configure an explicit anonymous branch to prevent requests without either credential from reaching the backend.</p>