In today’s modern digital environment, more organizations are relying on remote work than ever before. While this shift has given companies unprecedented flexibility when it comes to deploying their workforce, it has also presented challenges in keeping their devices, operations, and personnel protected, especially in regard to API security. Without proper oversight, attackers can access your organization’s server by exploiting such security vulnerabilities.

When it comes to digital identity, OpenID and OAuth are two peas in a pod, but they have their differences. OpenID connects you to relying parties using a single sign-on, while OAuth grants access tokens so you can give apps limited access. They both make authentication simple, seamless, and secure. However, don't be fooled: behind the scenes, they're as different as night and day. OpenID is about logging you in, while OAuth is all about letting apps in.

The Kong Gateway CI was failing intermittently (about once every 100 runs) on the ARM64 platform with a strange error: “attempt to perform arithmetic on local 'i' (a function value)”. The variable i in the context is an integer but at runtime, it was sometimes a function value. This is caused by an error in the LuaJIT ARM64 JIT compiler. We’ve investigated and found the issue and the fix is merged in the LuaJIT upstream. This document describes how we fixed the error.

API Summit 2023 has just concluded, with awesome announcements including the launch of Kong Mesh in Konnect, and Dedicated Cloud Gateways. In addition to launching new capabilities, we also ensured that our existing products continue to grow and deliver value. With that in mind, I’m pleased to announce the immediate availability of Kong Ingress Controller 2.12.

Picture this: You're building the next generation of microservices architecture in your organization. The orchestration is in place, containers are humming, and you've chosen Kong Gateway (naturally) to manage the APIs, ensuring smooth communication. But then, you hit a snag. You need a custom filter not part of the standard library of plugins, or you envision a unique way to manipulate, observe, or control the traffic.

API Summit 2023 is a wrap! Over the two-day conference (our sixth-annual event), we packed in over 40 hours of content in 100 sessions touching on everything from ensuring reliable connectivity to generative AI. We heard from investors about the future of APIs, as well as stories from users and customers from all over the world. And, of course, we also had plenty of Kong-related news to share. Here are some of the highlights from the event and a round-up of all the Kong news dropped this week.

We’re excited to announce Kong's unified API lifecycle management platform. Kong Konnect, our cloud API platform, can now manage services from API gateway, Ingress, and service mesh with a hosted control plane that can be implemented across any cloud provider, Kubernetes distribution, or on-premises data centers.

Today at API Summit 2023, we’re launching a revolutionary update to Kong Konnect SaaS that brings together many of the innovations we’ve been developing this last year. This latest version of Kong Konnect is dedicated to visionary and pragmatic developers and customers who are working hard to make their organizations leaders in an API-first world. For the first time ever, the Kong Konnect unified API platform can now bring together all API runtimes under one, single cloud management plane.

The growth of APIs continues to drive our digital economy, and API management underpins the success of every modern application and the businesses that depend on their success. Today, we are very excited to announce the release of an essential guide to building and managing next-generation API platforms with GraphQL. Kong and Apollo, as leaders in the respective areas of API management and GraphQL, have partnered to author a thorough technical examination of next-generation API platforms.