{"action":"created","comment":{"url":"https://api.github.com/repos/istio/istio.io/pulls/comments/223090887","pull_request_review_id":162141807,"id":223090887,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIyMzA5MDg4Nw==","diff_hunk":"@@ -224,7 +224,7 @@ Istio provides two types of authentication:\n - **Origin authentication**, also known as **end-user authentication**: verifies the\n   original client making the request as an end-user or device.\n   Istio enables request-level authentication with JSON Web Token (JWT) validation\n-  and a streamlined developer experience for [Auth0](https://auth0.com/), [Firebase Auth](https://firebase.google.com/docs/auth/),\n+  and a streamlined developer experience for open source OpenID Connect providers [ORY Hydra](https://www.ory.sh), [Keycloak](https://www.keycloak.org), closed source providers [Auth0](https://auth0.com/), [Firebase Auth](https://firebase.google.com/docs/auth/),","path":"content/docs/concepts/security/index.md","position":5,"original_position":5,"commit_id":"9fbef0f8bd5863923ba35935b4d7e4d93bc50091","original_commit_id":"9fbef0f8bd5863923ba35935b4d7e4d93bc50091","user":{"login":"liminw","id":20001914,"node_id":"MDQ6VXNlcjIwMDAxOTE0","avatar_url":"https://avatars3.githubusercontent.com/u/20001914?v=4","gravatar_id":"","url":"https://api.github.com/users/liminw","html_url":"https://github.com/liminw","followers_url":"https://api.github.com/users/liminw/followers","following_url":"https://api.github.com/users/liminw/following{/other_user}","gists_url":"https://api.github.com/users/liminw/gists{/gist_id}","starred_url":"https://api.github.com/users/liminw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liminw/subscriptions","organizations_url":"https://api.github.com/users/liminw/orgs","repos_url":"https://api.github.com/users/liminw/repos","events_url":"https://api.github.com/users/liminw/events{/privacy}","received_events_url":"https://api.github.com/users/liminw/received_events","type":"User","site_admin":false},"body":"It's a good point that currently Istio only provides JWT authentication. OIDC connect is more on the client side to acquire a token. There is an ongoing work in Istio community to provide OIDC (token acquisition) support at Ingress. For now, it's probably more accurate to say that\r\n\"Istio enables request-level authentication with JSON Web Token (JWT) validation for JWTs issued by any OpenID Connect providers, such as [Auth0](https://auth0.com/), [Firebase Auth](https://firebase.google.com/docs/auth/), [Google Auth](https://developers.google.com/identity/protocols/OpenIDConnect), [ORY Hydra](https://www.ory.sh), [Keycloak](https://www.keycloak.org). \"\r\n\r\nI am curious about why you think \"JWT authorization is not sufficient for most end-user sessions\". Istio authorization allows customers to authorize any JWT claims today. We could chat more on this (my email is liminwang@google.com). Or you can open a GitHub issue for that. ","created_at":"2018-10-05T17:54:33Z","updated_at":"2018-10-05T17:54:52Z","html_url":"https://github.com/istio/istio.io/pull/2689#discussion_r223090887","pull_request_url":"https://api.github.com/repos/istio/istio.io/pulls/2689","author_association":"CONTRIBUTOR","_links":{"self":{"href":"https://api.github.com/repos/istio/istio.io/pulls/comments/223090887"},"html":{"href":"https://github.com/istio/istio.io/pull/2689#discussion_r223090887"},"pull_request":{"href":"https://api.github.com/repos/istio/istio.io/pulls/2689"}},"in_reply_to_id":220325721},"pull_request":{"url":"https://api.github.com/repos/istio/istio.io/pulls/2689","id":218091576,"node_id":"MDExOlB1bGxSZXF1ZXN0MjE4MDkxNTc2","html_url":"https://github.com/istio/istio.io/pull/2689","diff_url":"https://github.com/istio/istio.io/pull/2689.diff","patch_url":"https://github.com/istio/istio.io/pull/2689.patch","issue_url":"https://api.github.com/repos/istio/istio.io/issues/2689","number":2689,"state":"open","locked":false,"title":"Add open source OIDC providers to security page","user":{"login":"aeneasr","id":3372410,"node_id":"MDQ6VXNlcjMzNzI0MTA=","avatar_url":"https://avatars3.githubusercontent.com/u/3372410?v=4","gravatar_id":"","url":"https://api.github.com/users/aeneasr","html_url":"https://github.com/aeneasr","followers_url":"https://api.github.com/users/aeneasr/followers","following_url":"https://api.github.com/users/aeneasr/following{/other_user}","gists_url":"https://api.github.com/users/aeneasr/gists{/gist_id}","starred_url":"https://api.github.com/users/aeneasr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aeneasr/subscriptions","organizations_url":"https://api.github.com/users/aeneasr/orgs","repos_url":"https://api.github.com/users/aeneasr/repos","events_url":"https://api.github.com/users/aeneasr/events{/privacy}","received_events_url":"https://api.github.com/users/aeneasr/received_events","type":"User","site_admin":false},"body":"Adds open source OIDC providers ORY Hydra and Keycloak to the security overview page.\r\n\r\nCloses #2687","created_at":"2018-09-25T19:24:23Z","updated_at":"2018-10-05T17:54:52Z","closed_at":null,"merged_at":null,"merge_commit_sha":"ee9f8f8879ebd2e1c7874c521fc6cb80b246c30f","assignee":null,"assignees":[],"requested_reviewers":[{"login":"myidpt","id":102881,"node_id":"MDQ6VXNlcjEwMjg4MQ==","avatar_url":"https://avatars2.githubusercontent.com/u/102881?v=4","gravatar_id":"","url":"https://api.github.com/users/myidpt","html_url":"https://github.com/myidpt","followers_url":"https://api.github.com/users/myidpt/followers","following_url":"https://api.github.com/users/myidpt/following{/other_user}","gists_url":"https://api.github.com/users/myidpt/gists{/gist_id}","starred_url":"https://api.github.com/users/myidpt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/myidpt/subscriptions","organizations_url":"https://api.github.com/users/myidpt/orgs","repos_url":"https://api.github.com/users/myidpt/repos","events_url":"https://api.github.com/users/myidpt/events{/privacy}","received_events_url":"https://api.github.com/users/myidpt/received_events","type":"User","site_admin":false},{"login":"sdake","id":755849,"node_id":"MDQ6VXNlcjc1NTg0OQ==","avatar_url":"https://avatars1.githubusercontent.com/u/755849?v=4","gravatar_id":"","url":"https://api.github.com/users/sdake","html_url":"https://github.com/sdake","followers_url":"https://api.github.com/users/sdake/followers","following_url":"https://api.github.com/users/sdake/following{/other_user}","gists_url":"https://api.github.com/users/sdake/gists{/gist_id}","starred_url":"https://api.github.com/users/sdake/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sdake/subscriptions","organizations_url":"https://api.github.com/users/sdake/orgs","repos_url":"https://api.github.com/users/sdake/repos","events_url":"https://api.github.com/users/sdake/events{/privacy}","received_events_url":"https://api.github.com/users/sdake/received_events","type":"User","site_admin":false},{"login":"rcaballeromx","id":10066027,"node_id":"MDQ6VXNlcjEwMDY2MDI3","avatar_url":"https://avatars1.githubusercontent.com/u/10066027?v=4","gravatar_id":"","url":"https://api.github.com/users/rcaballeromx","html_url":"https://github.com/rcaballeromx","followers_url":"https://api.github.com/users/rcaballeromx/followers","following_url":"https://api.github.com/users/rcaballeromx/following{/other_user}","gists_url":"https://api.github.com/users/rcaballeromx/gists{/gist_id}","starred_url":"https://api.github.com/users/rcaballeromx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rcaballeromx/subscriptions","organizations_url":"https://api.github.com/users/rcaballeromx/orgs","repos_url":"https://api.github.com/users/rcaballeromx/repos","events_url":"https://api.github.com/users/rcaballeromx/events{/privacy}","received_events_url":"https://api.github.com/users/rcaballeromx/received_events","type":"User","site_admin":false},{"login":"liminw","id":20001914,"node_id":"MDQ6VXNlcjIwMDAxOTE0","avatar_url":"https://avatars3.githubusercontent.com/u/20001914?v=4","gravatar_id":"","url":"https://api.github.com/users/liminw","html_url":"https://github.com/liminw","followers_url":"https://api.github.com/users/liminw/followers","following_url":"https://api.github.com/users/liminw/following{/other_user}","gists_url":"https://api.github.com/users/liminw/gists{/gist_id}","starred_url":"https://api.github.com/users/liminw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liminw/subscriptions","organizations_url":"https://api.github.com/users/liminw/orgs","repos_url":"https://api.github.com/users/liminw/repos","events_url":"https://api.github.com/users/liminw/events{/privacy}","received_events_url":"https://api.github.com/users/liminw/received_events","type":"User","site_admin":false},{"login":"wattli","id":24381542,"node_id":"MDQ6VXNlcjI0MzgxNTQy","avatar_url":"https://avatars1.githubusercontent.com/u/24381542?v=4","gravatar_id":"","url":"https://api.github.com/users/wattli","html_url":"https://github.com/wattli","followers_url":"https://api.github.com/users/wattli/followers","following_url":"https://api.github.com/users/wattli/following{/other_user}","gists_url":"https://api.github.com/users/wattli/gists{/gist_id}","starred_url":"https://api.github.com/users/wattli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wattli/subscriptions","organizations_url":"https://api.github.com/users/wattli/orgs","repos_url":"https://api.github.com/users/wattli/repos","events_url":"https://api.github.com/users/wattli/events{/privacy}","received_events_url":"https://api.github.com/users/wattli/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[{"id":884247475,"node_id":"MDU6TGFiZWw4ODQyNDc0NzU=","url":"https://api.github.com/repos/istio/istio.io/labels/cla:%20yes","name":"cla: yes","color":"bfdadc","default":false}],"milestone":null,"commits_url":"https://api.github.com/repos/istio/istio.io/pulls/2689/commits","review_comments_url":"https://api.github.com/repos/istio/istio.io/pulls/2689/comments","review_comment_url":"https://api.github.com/repos/istio/istio.io/pulls/comments{/number}","comments_url":"https://api.github.com/repos/istio/istio.io/issues/2689/comments","statuses_url":"https://api.github.com/repos/istio/istio.io/statuses/9fbef0f8bd5863923ba35935b4d7e4d93bc50091","head":{"label":"aeneasr:patch-1","ref":"patch-1","sha":"9fbef0f8bd5863923ba35935b4d7e4d93bc50091","user":{"login":"aeneasr","id":3372410,"node_id":"MDQ6VXNlcjMzNzI0MTA=","avatar_url":"https://avatars3.githubusercontent.com/u/3372410?v=4","gravatar_id":"","url":"https://api.github.com/users/aeneasr","html_url":"https://github.com/aeneasr","followers_url":"https://api.github.com/users/aeneasr/followers","following_url":"https://api.github.com/users/aeneasr/following{/other_user}","gists_url":"https://api.github.com/users/aeneasr/gists{/gist_id}","starred_url":"https://api.github.com/users/aeneasr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aeneasr/subscriptions","organizations_url":"https://api.github.com/users/aeneasr/orgs","repos_url":"https://api.github.com/users/aeneasr/repos","events_url":"https://api.github.com/users/aeneasr/events{/privacy}","received_events_url":"https://api.github.com/users/aeneasr/received_events","type":"User","site_admin":false},"repo":{"id":150317279,"node_id":"MDEwOlJlcG9zaXRvcnkxNTAzMTcyNzk=","name":"istio.io","full_name":"aeneasr/istio.io","private":false,"owner":{"login":"aeneasr","id":3372410,"node_id":"MDQ6VXNlcjMzNzI0MTA=","avatar_url":"https://avatars3.githubusercontent.com/u/3372410?v=4","gravatar_id":"","url":"https://api.github.com/users/aeneasr","html_url":"https://github.com/aeneasr","followers_url":"https://api.github.com/users/aeneasr/followers","following_url":"https://api.github.com/users/aeneasr/following{/other_user}","gists_url":"https://api.github.com/users/aeneasr/gists{/gist_id}","starred_url":"https://api.github.com/users/aeneasr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aeneasr/subscriptions","organizations_url":"https://api.github.com/users/aeneasr/orgs","repos_url":"https://api.github.com/users/aeneasr/repos","events_url":"https://api.github.com/users/aeneasr/events{/privacy}","received_events_url":"https://api.github.com/users/aeneasr/received_events","type":"User","site_admin":false},"html_url":"https://github.com/aeneasr/istio.io","description":"Source for the istio.io site","fork":true,"url":"https://api.github.com/repos/aeneasr/istio.io","forks_url":"https://api.github.com/repos/aeneasr/istio.io/forks","keys_url":"https://api.github.com/repos/aeneasr/istio.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/aeneasr/istio.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/aeneasr/istio.io/teams","hooks_url":"https://api.github.com/repos/aeneasr/istio.io/hooks","issue_events_url":"https://api.github.com/repos/aeneasr/istio.io/issues/events{/number}","events_url":"https://api.github.com/repos/aeneasr/istio.io/events","assignees_url":"https://api.github.com/repos/aeneasr/istio.io/assignees{/user}","branches_url":"https://api.github.com/repos/aeneasr/istio.io/branches{/branch}","tags_url":"https://api.github.com/repos/aeneasr/istio.io/tags","blobs_url":"https://api.github.com/repos/aeneasr/istio.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/aeneasr/istio.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/aeneasr/istio.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/aeneasr/istio.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/aeneasr/istio.io/statuses/{sha}","languages_url":"https://api.github.com/repos/aeneasr/istio.io/languages","stargazers_url":"https://api.github.com/repos/aeneasr/istio.io/stargazers","contributors_url":"https://api.github.com/repos/aeneasr/istio.io/contributors","subscribers_url":"https://api.github.com/repos/aeneasr/istio.io/subscribers","subscription_url":"https://api.github.com/repos/aeneasr/istio.io/subscription","commits_url":"https://api.github.com/repos/aeneasr/istio.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/aeneasr/istio.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/aeneasr/istio.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/aeneasr/istio.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/aeneasr/istio.io/contents/{+path}","compare_url":"https://api.github.com/repos/aeneasr/istio.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/aeneasr/istio.io/merges","archive_url":"https://api.github.com/repos/aeneasr/istio.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/aeneasr/istio.io/downloads","issues_url":"https://api.github.com/repos/aeneasr/istio.io/issues{/number}","pulls_url":"https://api.github.com/repos/aeneasr/istio.io/pulls{/number}","milestones_url":"https://api.github.com/repos/aeneasr/istio.io/milestones{/number}","notifications_url":"https://api.github.com/repos/aeneasr/istio.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/aeneasr/istio.io/labels{/name}","releases_url":"https://api.github.com/repos/aeneasr/istio.io/releases{/id}","deployments_url":"https://api.github.com/repos/aeneasr/istio.io/deployments","created_at":"2018-09-25T19:17:57Z","updated_at":"2018-09-25T19:18:02Z","pushed_at":"2018-09-25T19:24:02Z","git_url":"git://github.com/aeneasr/istio.io.git","ssh_url":"git@github.com:aeneasr/istio.io.git","clone_url":"https://github.com/aeneasr/istio.io.git","svn_url":"https://github.com/aeneasr/istio.io","homepage":"https://istio.io/","size":35682,"stargazers_count":0,"watchers_count":0,"language":"HTML","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"istio:master","ref":"master","sha":"3acfe3fe405b140d0c757d6e3d65438f27a144ca","user":{"login":"istio","id":23534644,"node_id":"MDEyOk9yZ2FuaXphdGlvbjIzNTM0NjQ0","avatar_url":"https://avatars1.githubusercontent.com/u/23534644?v=4","gravatar_id":"","url":"https://api.github.com/users/istio","html_url":"https://github.com/istio","followers_url":"https://api.github.com/users/istio/followers","following_url":"https://api.github.com/users/istio/following{/other_user}","gists_url":"https://api.github.com/users/istio/gists{/gist_id}","starred_url":"https://api.github.com/users/istio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/istio/subscriptions","organizations_url":"https://api.github.com/users/istio/orgs","repos_url":"https://api.github.com/users/istio/repos","events_url":"https://api.github.com/users/istio/events{/privacy}","received_events_url":"https://api.github.com/users/istio/received_events","type":"Organization","site_admin":false},"repo":{"id":82706976,"node_id":"MDEwOlJlcG9zaXRvcnk4MjcwNjk3Ng==","name":"istio.io","full_name":"istio/istio.io","private":false,"owner":{"login":"istio","id":23534644,"node_id":"MDEyOk9yZ2FuaXphdGlvbjIzNTM0NjQ0","avatar_url":"https://avatars1.githubusercontent.com/u/23534644?v=4","gravatar_id":"","url":"https://api.github.com/users/istio","html_url":"https://github.com/istio","followers_url":"https://api.github.com/users/istio/followers","following_url":"https://api.github.com/users/istio/following{/other_user}","gists_url":"https://api.github.com/users/istio/gists{/gist_id}","starred_url":"https://api.github.com/users/istio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/istio/subscriptions","organizations_url":"https://api.github.com/users/istio/orgs","repos_url":"https://api.github.com/users/istio/repos","events_url":"https://api.github.com/users/istio/events{/privacy}","received_events_url":"https://api.github.com/users/istio/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/istio/istio.io","description":"Source for the istio.io site","fork":false,"url":"https://api.github.com/repos/istio/istio.io","forks_url":"https://api.github.com/repos/istio/istio.io/forks","keys_url":"https://api.github.com/repos/istio/istio.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/istio/istio.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/istio/istio.io/teams","hooks_url":"https://api.github.com/repos/istio/istio.io/hooks","issue_events_url":"https://api.github.com/repos/istio/istio.io/issues/events{/number}","events_url":"https://api.github.com/repos/istio/istio.io/events","assignees_url":"https://api.github.com/repos/istio/istio.io/assignees{/user}","branches_url":"https://api.github.com/repos/istio/istio.io/branches{/branch}","tags_url":"https://api.github.com/repos/istio/istio.io/tags","blobs_url":"https://api.github.com/repos/istio/istio.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/istio/istio.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/istio/istio.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/istio/istio.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/istio/istio.io/statuses/{sha}","languages_url":"https://api.github.com/repos/istio/istio.io/languages","stargazers_url":"https://api.github.com/repos/istio/istio.io/stargazers","contributors_url":"https://api.github.com/repos/istio/istio.io/contributors","subscribers_url":"https://api.github.com/repos/istio/istio.io/subscribers","subscription_url":"https://api.github.com/repos/istio/istio.io/subscription","commits_url":"https://api.github.com/repos/istio/istio.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/istio/istio.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/istio/istio.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/istio/istio.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/istio/istio.io/contents/{+path}","compare_url":"https://api.github.com/repos/istio/istio.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/istio/istio.io/merges","archive_url":"https://api.github.com/repos/istio/istio.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/istio/istio.io/downloads","issues_url":"https://api.github.com/repos/istio/istio.io/issues{/number}","pulls_url":"https://api.github.com/repos/istio/istio.io/pulls{/number}","milestones_url":"https://api.github.com/repos/istio/istio.io/milestones{/number}","notifications_url":"https://api.github.com/repos/istio/istio.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/istio/istio.io/labels{/name}","releases_url":"https://api.github.com/repos/istio/istio.io/releases{/id}","deployments_url":"https://api.github.com/repos/istio/istio.io/deployments","created_at":"2017-02-21T17:19:49Z","updated_at":"2018-10-05T16:54:37Z","pushed_at":"2018-10-05T16:54:31Z","git_url":"git://github.com/istio/istio.io.git","ssh_url":"git@github.com:istio/istio.io.git","clone_url":"https://github.com/istio/istio.io.git","svn_url":"https://github.com/istio/istio.io","homepage":"https://istio.io/","size":35885,"stargazers_count":128,"watchers_count":128,"language":"HTML","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":362,"mirror_url":null,"archived":false,"open_issues_count":104,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":362,"open_issues":104,"watchers":128,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/istio/istio.io/pulls/2689"},"html":{"href":"https://github.com/istio/istio.io/pull/2689"},"issue":{"href":"https://api.github.com/repos/istio/istio.io/issues/2689"},"comments":{"href":"https://api.github.com/repos/istio/istio.io/issues/2689/comments"},"review_comments":{"href":"https://api.github.com/repos/istio/istio.io/pulls/2689/comments"},"review_comment":{"href":"https://api.github.com/repos/istio/istio.io/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/istio/istio.io/pulls/2689/commits"},"statuses":{"href":"https://api.github.com/repos/istio/istio.io/statuses/9fbef0f8bd5863923ba35935b4d7e4d93bc50091"}},"author_association":"NONE"}}
{"actor":{"display_login":"liminw"}}