The latest news and announcements about Kong, our products, and our ecosystem, as well as voices from across our community.
The JSON Web Token (JWT) is an open standard that allows information to be transferred securely between different parties. The token is digitally signed by using a private key (HMAC) or a public/private key (RSA) by building a JSON Web Signature (JWS). It guarantees that the JWT hasn’t been…
[](/blog/engineering/craft-and-sign-custom-jwt)
Building APIs is a craft. Your API product must be stable, accurate, well documented, performant, and meet the informational demands of your clients — no small task. In this series, we'll take a close look at GraphQL , a trending API technology that aims to help you deliver efficient and capable…
[](/blog/engineering/graphql-from-the-ground-up)
A developer portal is a storefront to your APIs (the products) that internal and external developers are trying to consume. The Kong Developer Portal provides a single source of truth for all developers to locate, access and consume services. With intuitive content management for documentation,…
[](/blog/engineering/customize-kong-developer-portal)
Two of the best (in my opinion) features in Konnect are the ServiceHub and Dev Portal. However, they're also two of the most misunderstood. Aren't they the same thing? Why would you need a ServiceHub vs. Dev Portal? Well, I'm glad you asked! The really quick version is that ServiceHub is like your…
[](/blog/engineering/service-hub-developer-portal)
Kong Dev Portal comes out of the box with a RESTful API -based catalog and YAML-based template functionality. In this tutorial, I'll show you how to get to the next level of API documentation using Kong Dev Portal with GraphQL. That way, you'll be able to give your API developers an interactive…
[](/blog/engineering/kong-developer-portal-graphql)
Want to learn more about the nuts and bolts of APIOps? Download our eBook, Unlocking the Full Potential of your APIs with APIOps , and learn about the stages of APIOps, get an understanding of the technical assets required, and explore the tooling needed to transform API development and management.…
[](/blog/engineering/automating-developer-pipeline-apiops)
OPA support to secure communication between these calls [cta-banner
[](/blog/engineering/kong-service-mesh-and-opa-policy)
In this Kong Gateway tutorial, you'll learn how to: Keep in mind that these instructions are a starting point. You may need to change some of the steps to harden your environment when running in production. For more detailed information, visit our Kong Gateway documentation . One of the reasons…
[](/blog/engineering/kong-gateway-tutorial)
This tutorial shows you how easy it is to build a custom Lua plugin for Kong Gateway. My Kong Lua plugin example will automatically add a custom header to any response sent out, indicating the current plugin version. Kong API Gateway is built on OpenResty , which extends the NGINX proxy server to…
[](/blog/engineering/custom-lua-plugin-kong-gateway)