https://www.javiercd.es/en/tags/signatures/Recent content in Signatures on AtlasHugo -- gohugo.ioenSun, 26 Jul 2026 00:00:00 +0200https://www.javiercd.es/en/posts/kong/plugins-autenticacion/12-autenticacion-hmac-auth/12-autenticacion-hmac-auth/Sun, 26 Jul 2026 00:00:00 +0200https://www.javiercd.es/en/posts/kong/plugins-autenticacion/12-autenticacion-hmac-auth/12-autenticacion-hmac-auth/<p>HMAC Authentication proves that a request was created by a client that knows a shared secret without sending that secret in the request. In addition to authenticating the client, the signature detects changes to the signed elements while they are in transit.</p> <p>This article explains how an HMAC signature is built and validated by Kong Gateway, and how the Consumer relates to its credential. We then build a reproducible Kong Ingress Controller lab and protect <code>/hmac-auth</code>.</p>