Skip to main content
Case StudiesEcosystemAuthenticationPluginsCommunityVulnerabilities

Weekly Report (Aug 23 - Aug 29)

· 3 min read

Introduction

Apache APISIX has grown as a community from the first day of open source and has quickly become the most active open source API gateway project in the world. These achievements cannot be achieved without the joint efforts of our community partners.

"The Apache APISIX Community Weekly Newsletter hopes to help community members better grasp the weekly progress of the Apache APISIX community and facilitate your participation in the Apache APISIX community.

We've also put together some issues for those new to the community! If you are interested, don't miss them!

Contributor statistics

Number of new contributors
Click to Preview

New contributors this week
Click to Preview

Good first issue

Issue #4241

Link: https://github.com/apache/apisix/issues/4241

Problem Description: Now when adding the jwt-auth plugin to a service/route, the jwt token does not contain a "key" declaration.

{
  "iss": "http://127.0.0.1",
  "client_id": "application1",
  "sub": "1234567890",
  "iat": 1516239022
}

Screenshot of issue description
Click to Preview

Issue #4441

Link: Issue #4441

Issue Description: Now APISIX stream_routes parameter "remote_addr" only support single ip, need to support multiple ip or match rule like "192.168.0.0/16", like http routing parameter "remote_addr".

Issue #3601

Link: Issue #3601

Issue Description: Currently APISIX only has unit tests for request-response gRPC proxies, and no tests related to streaming gRPC. Need to add test cases for streaming gRPC to it.

Issue #3931

Link: Issue #3931

Issue Description: http_to_https in the redirect plugin lacks curl tests, need to add curl tests for http_to_https in the redirect plugin and update the documentation Apache APISIX redirect plugin.

Feature highlights of the week

  • Centralized Authentication with the OpenID Connect Plugin for Apache APISIX: Apache APISIX is a dynamic, real-time, high-performance API gateway that provides rich traffic management features such as load balancing, dynamic upstream, canary release, service meltdown, authentication, observability, etc. Apache APISIX not only supports plug-in dynamic changes and Apache APISIX's OpenID Connect plug-in supports OpenID, which allows users to replace authentication from traditional authentication mode to centralized authentication mode.

  • Why did APISIX choose the Nginx + Lua technology stack?: Provides the historical background and advantages of the Nginx + Lua technology stack chosen by APISIX, noting that " High performance + flexibility" is what makes APISIX stand out from other gateways.

  • Apache APISIX 2.9 Released with More New Features!: Apache APISIX version 2.9 is released! With 30+ developers, 100+ PR submissions, 2 new features, and improved support for plugins, find out what's new in Apache APISIX 2.9!

Table of Contents