Docs
Plugin HubCategoriesAuthenticationKey AuthChangelog

Key Auth Changelog

Released changes to the Key Auth plugin (`key-auth`), newest release first.

15 released changes name key-auth, newest release first — 7 in Apache APISIX, 8 in API7 Gateway. Each row links to the change itself.

Apache APISIX

API7 Gateway

ReleaseDateTypeChange
3.10.3 (opens in API7 Gateway docs)2026-07-14FixKey Auth and other consumer authentication plugins: Fixed issue: If a consumer credential referenced a secret that could not be resolved, the Data Plane could still index the unresolved literal value and authenticate… (opens in API7 Gateway docs)
3.10.1 (opens in API7 Gateway docs)2026-06-15FixFixed issue: An Admin API PATCH re-encrypted already-encrypted plugin fields, so a PATCH on any field could corrupt stored secrets (such as key-auth keys). Encrypted fields are now decrypted before the merge and re-en… (opens in API7 Gateway docs)
3.9.16 (opens in API7 Gateway docs)2026-07-10FixKey Auth and other consumer authentication plugins: Fixed issue: If a consumer credential referenced a secret that could not be resolved, the Data Plane could still index the unresolved literal value and authenticate… (opens in API7 Gateway docs)
3.9.14 (opens in API7 Gateway docs)2026-06-15FeatureCredential secrets (such as key-auth and basic-auth keys) are now returned only once, at creation time. Subsequent reads of the credential omit the secret value. (opens in API7 Gateway docs)
3.9.10 (opens in API7 Gateway docs)2026-04-22FeatureAdded form-based configuration modes for the Key Auth and Basic Auth plugins, enabling visual credential setup without manual JSON editing. (opens in API7 Gateway docs)
3.9.2 (opens in API7 Gateway docs)2026-01-19FeatureBasic Auth/JWT Auth/Key Auth/HMAC Auth/LDAP Auth: Added a realm configuration option to set the Realm value in the WWW-Authenticate response header for 401 authentication failures. (opens in API7 Gateway docs)
3.2.16.3 (opens in API7 Gateway docs)2024-10-21FeatureKey Authentication (opens in API7 Gateway docs)
3.2.12.0 (opens in API7 Gateway docs)2024-05-24FixAvoid duplicate API keys when using key-auth plugin. (opens in API7 Gateway docs)