feat(identity): how to rotate a client secret - #6463
Merged
Conversation
✅ Deploy Preview for kongdeveloper ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
|
juliamrch
force-pushed
the
iss4475-how-to
branch
from
July 28, 2026 16:28
4670cb1 to
c00e790
Compare
lena-larionova
requested changes
Jul 28, 2026
lena-larionova
left a comment
lena-larionova
left a comment
Contributor
There was a problem hiding this comment.
Works great, just need to fix a couple of indents.
Co-authored-by: lena-larionova <54370747+lena-larionova@users.noreply.github.com>
juliamrch
commented
Jul 29, 2026
juliamrch
commented
Jul 29, 2026
juliamrch
commented
Jul 29, 2026
Co-authored-by: Julia <101819212+juliamrch@users.noreply.github.com>
tomek-labuk
approved these changes
Jul 29, 2026
tomek-labuk
left a comment
tomek-labuk
left a comment
Contributor
There was a problem hiding this comment.
Looks good and works! One minor suggestion that might not be applicable here, but as a user I might want to see some use case for this feature like: (maybe. add it somewhere in the tl;dr
- Scheduled rotation, i.e. some compliance policies require rotating credentials on a fixed schedule.
- Leaked secret: If a secret is exposed, you need to replace it without breaking anything using it.
- Multiple consumers: If several services share one client, keeping both secrets active during rollout avoids breaking the ones that haven't switched yet.
juliamrch
added a commit
that referenced
this pull request
Jul 30, 2026
* feat(identity): how to rotate a client secret (#6463) * adapt Jessup instructions to a full guide * Apply suggestions from code review Co-authored-by: lena-larionova <54370747+lena-larionova@users.noreply.github.com> * Apply suggestion from @juliamrch * Apply suggestions from code review Co-authored-by: Julia <101819212+juliamrch@users.noreply.github.com> --------- Co-authored-by: lena-larionova <54370747+lena-larionova@users.noreply.github.com> * feat(identity): multiple active secrets (#6338) * Port Kong Identity clients & secrets docs Co-authored-by: ajessup <andrew.jessup@konghq.com> Co-authored-by: Diana <diana.brezza@konghq.com> * update Clients definition * Apply suggestions from code review Co-authored-by: Julia <101819212+juliamrch@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Julia <101819212+juliamrch@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Julia <101819212+juliamrch@users.noreply.github.com> * Apply suggestion from @juliamrch * Apply suggestions from code review Co-authored-by: Julia <101819212+juliamrch@users.noreply.github.com> * Remove OAuth2 authorization code flow comment Removed the comment section detailing the authorization code flow for OAuth2. * add how-to link * Update auth-servers.md Co-authored-by: Diana <75819066+cloudjumpercat@users.noreply.github.com> * Update auth-servers.md Co-authored-by: Diana <75819066+cloudjumpercat@users.noreply.github.com> * Update auth-servers.md Co-authored-by: Diana <75819066+cloudjumpercat@users.noreply.github.com> * specify the options when generating a new secret with the API * syntax + tables --------- Co-authored-by: Diana <diana.brezza@konghq.com> Co-authored-by: Diana <75819066+cloudjumpercat@users.noreply.github.com> --------- Co-authored-by: lena-larionova <54370747+lena-larionova@users.noreply.github.com> Co-authored-by: Diana <diana.brezza@konghq.com> Co-authored-by: Diana <75819066+cloudjumpercat@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
This how-to guide shows how to rotate a client secret using the auth-server API.
closes #6339
Testing instructions
Replace
.combytechon the API calls.Preview Links
https://deploy-preview-6463--kongdeveloper.netlify.app/how-to/rotate-auth-server-client-secrets/
Checklist
descriptionentry in frontmatter.