Need a general forward auth plugin to delegate authentication and authorization to external service.

[jaggerwang]

Why do you need it?

For complex authentication and authorization senario, the built in auth plugins can't satify the requirement, it should delegate auth to external service.

How could it be?

Supply a built-in plugin to call external api to auth the original request, the input of the auth request is the credential from original request's header or query, and the output is a json object contains code and message, which can be specified with json path like $.code and $.message, the plugin check the http status and the code whether match some value.

[hanxiantao]

Whether it is similar to higress support ext_authz wasmplugin #895.I am currently in the process of implementing it.

[jaggerwang]

👍Is there any plan or when it will be finished.

[hanxiantao]

👍Is there any plan or when it will be finished.

The basic code is already completed, and I'm currently debugging features and supplementing the documentation. If things go smoothly, I expect to submit a PR for the first version sometime this week, and I'd appreciate it if you could help review the code then.

[jaggerwang]

OK, I'll try and test.

[hanxiantao]

@jaggerwang The ext-auth plugin is now supported and will be released with the next version. #1103