Any product supporting API Keys (ala github personal access tokens) out of the box ? In our case, we are only interested in a service to service scenario.
I really liked Expresss API Gateway, a middleware for express that gives a nice API for creating and using auth tokens: https://www.express-gateway.io/ It can act as a proxy to downstream services and secures access to them with those tokens.
Also check out bigger players in the API gateway space. Kong, Krakend, etc. Most of them all support auth tokens out of the box in the open source versions.
As with Keycloak, Auth0 can implement access tokens via a client and some code.
However, that would assume you use a custom policy within your token for access control, as Auth0 does not provide the same level of RBAC for clients as it does to users.
Any product supporting API Keys (ala github personal access tokens) out of the box ? In our case, we are only interested in a service to service scenario.
A couple of examples that don't:
Keycloak requires some coding to achieve it [1]
Auth0 does not seem to support it [2]
[1] http://www.zakariaamine.com/2019-06-14/extending-keycloak
[2] https://community.auth0.com/t/how-to-implement-api-keys-usin...