---
title: "Changes to Create an AI Gateway Auth Strategy"
method: POST
path: "/v1/ai-gateways/{gatewayId}/auth-strategies"
---

# Changes to Create an AI Gateway Auth Strategy

`POST /v1/ai-gateways/{gatewayId}/auth-strategies`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 6 of 87 revisions.

- **2026-10-15** `7aab863a6daa`: 1 breaking, 2 warning
- **2026-10-07** `59663dd13a10`: 14 breaking, 424 info
- **2026-10-05** `1efb48111817`: 5 info
- **2026-09-25** `68d43091b84d`: 3 warning
- **2026-09-18** `f324fb7610e4`: 4 breaking, 2 warning, 32 info
- **2026-08-24** `46dabd88efd3`: 1 info

## Changes

- **2026-10-15** `7aab863a6daa`: 1 breaking, 2 warning
  - added `#/components/schemas/InvalidParameterMinimumTime, #/components/schemas/InvalidParameterMaximumTime` to the `invalid_parameters/items/` response property `oneOf` list for the response status `400`
  - added the new `key_invalid` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
  - added the new `unique` enum value to the `invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
- **2026-10-07** `59663dd13a10`: 14 breaking, 424 info
  - the request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/issuer` became required
  - removed the enum value `1.00` of the request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/http_version`
  - removed the enum value `1.10` of the request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/http_version`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/principals/principal_claim` request property's minLength was increased from `0` to `1`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/upstream_headers/items/path` request property's minLength was increased from `0` to `1`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/principals/principal_claim` response property's minItems was decreased from `1` to `0` for the response status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/upstream_headers/items/path` response property's minItems was decreased from `1` to `0` for the response status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/http_proxy` response's property format changed from `uri` to no format for status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/https_proxy` response's property format changed from `uri` to no format for status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/introspection_endpoint` response's property format changed from `uri` to no format for status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/jwks_endpoint` response's property format changed from `uri` to no format for status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/leeway` response's property type changed from `integer` to `number` for status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/mtls_introspection_endpoint` response's property format changed from `uri` to no format for status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/timeout` response's property type changed from `integer` to `number` for status `201`
  - added the new optional request property `oneOf[subschema #1: AIGatewayAuthStrategyKeyAuthConfig]/config/identity_realms`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/anonymous`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/audience`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/audience_claim`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authenticated_groups_claim`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_cookie_domain`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_cookie_http_only`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_cookie_name`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_cookie_path`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_cookie_same_site`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_cookie_secure`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_endpoint`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_query_args_client`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_query_args_names`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_query_args_values`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/authorization_rolling_timeout`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/bearer_token_cookie_name`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/bearer_token_header_name`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/bearer_token_param_type`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/by_username_ignore_case`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/cache_token_exchange`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/cache_tokens`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/cache_ttl`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/cache_ttl_max`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/cache_ttl_min`
  - added the new optional request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/config/cache_ttl_neg`
  - …398 more
- **2026-10-05** `1efb48111817`: 5 info
  - added the new optional request property `oneOf[subschema #1: AIGatewayAuthStrategyKeyAuthConfig]/config/realm`
  - added the new optional request property `oneOf[subschema #1: AIGatewayAuthStrategyKeyAuthConfig]/config/run_on_preflight`
  - added the optional property `oneOf[subschema #1: AIGatewayAuthStrategyKeyAuthConfig]/config/anonymous` to the response with the `201` status
  - added the optional property `oneOf[subschema #1: AIGatewayAuthStrategyKeyAuthConfig]/config/realm` to the response with the `201` status
  - added the optional property `oneOf[subschema #1: AIGatewayAuthStrategyKeyAuthConfig]/config/run_on_preflight` to the response with the `201` status
- **2026-09-25** `68d43091b84d`: 3 warning
  - added the new `400.00` enum value to the `status` response property for the response status `400`
  - added the new `403.00` enum value to the `status` response property for the response status `403`
  - added the new `409.00` enum value to the `status` response property for the response status `409`
- **2026-09-18** `f324fb7610e4`: 4 breaking, 2 warning, 32 info
  - the response's body type changed from no type to `object` for status `400`
  - the response's body type changed from no type to `object` for status `403`
  - the response's body type changed from no type to `object` for status `409`
  - the response's body type changed from no type to `object` for status `429`
  - changed the pattern of the request property `oneOf[subschema #1: AIGatewayAuthStrategyKeyAuthConfig]/name/allOf[#/components/schemas/AIGatewayEntityIdentifier]/` from `^[A-Za-z0-9._:-]{1,256}$` to `^[A-Za-z0-9._:@-]{1,256}$`
  - changed the pattern of the request property `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/name/allOf[#/components/schemas/AIGatewayEntityIdentifier]/` from `^[A-Za-z0-9._:-]{1,256}$` to `^[A-Za-z0-9._:@-]{1,256}$`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `400`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `401`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `403`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `409`
  - removed `#/components/schemas/BaseError, subschema #2` from the response body `allOf` list for the response status `429`
  - added the optional property `type` to the response with the `400` status
  - added the optional property `type` to the response with the `403` status
  - added the optional property `type` to the response with the `409` status
  - added the optional property `type` to the response with the `429` status
  - the response property `detail` became required for the status `401`
  - the response property `instance` became required for the status `401`
  - the response property `status` became required for the status `401`
  - the response property `title` became required for the status `401`
  - the `oneOf[subschema #1: AIGatewayAuthStrategyKeyAuthConfig]/name/allOf[#/components/schemas/AIGatewayEntityIdentifier]/` response's property pattern was changed from `^[A-Za-z0-9._:-]{1,256}$` to `^[A-Za-z0-9._:@-]{1,256}$` for the status `201`
  - the `oneOf[subschema #2: AIGatewayAuthStrategyOpenIDConnectConfig]/name/allOf[#/components/schemas/AIGatewayEntityIdentifier]/` response's property pattern was changed from `^[A-Za-z0-9._:-]{1,256}$` to `^[A-Za-z0-9._:@-]{1,256}$` for the status `201`
  - added the required property `detail` to the response with the `400` status
  - added the required property `detail` to the response with the `403` status
  - added the required property `detail` to the response with the `409` status
  - added the required property `detail` to the response with the `429` status
  - added the required property `instance` to the response with the `400` status
  - added the required property `instance` to the response with the `403` status
  - added the required property `instance` to the response with the `409` status
  - added the required property `instance` to the response with the `429` status
  - added the required property `invalid_parameters` to the response with the `400` status
  - added the required property `status` to the response with the `400` status
  - added the required property `status` to the response with the `403` status
  - added the required property `status` to the response with the `409` status
  - added the required property `status` to the response with the `429` status
  - added the required property `title` to the response with the `400` status
  - added the required property `title` to the response with the `403` status
  - added the required property `title` to the response with the `409` status
  - added the required property `title` to the response with the `429` status
- **2026-08-24** `46dabd88efd3`: 1 info
  - endpoint added

---

[Operation](https://skmtc.dev/kong/apis/konnect-api-go-sdk/docs/v1/ai-gateways/:gatewayId/auth-strategies/post.md) · [API](https://skmtc.dev/kong/apis/konnect-api-go-sdk.md) · [Page](https://skmtc.dev/kong/apis/konnect-api-go-sdk/changes/v1/ai-gateways/:gatewayId/auth-strategies/post)
