# Best way to implement this flow with KONG? **URL:** \ **Category:** Questions\ **Created:** [May 14, 2019, 4:48am UTC](https://discuss.konghq.com/t/best-way-to-implement-this-flow-with-kong/3509 "2019-05-14T04:48:45Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![shirohige](https://avatars.discourse-cdn.com/v4/letter/s/97f17d/32.png) [@shirohige](https://discuss.konghq.com/u/shirohige)\ **Post date:** [May 14, 2019, 4:48am UTC](https://discuss.konghq.com/t/best-way-to-implement-this-flow-with-kong/3509/1 "2019-05-14T04:48:45Z")
Hello Community, Iā€™m new to Kong, trying to find my ways. Every incoming Request will contain a JWT token. Kong Will verify the token and the token will contain a KEY and on the basis of the key, Kong will check if the request can access so and so uris How should I implement this using one or more plugins? ---
**Author:** ![jeremyjpj0916](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/jeremyjpj0916/32/1388_2.png) [@jeremyjpj0916](https://discuss.konghq.com/u/jeremyjpj0916)\ **Post date:** [May 14, 2019, 5:22am UTC](https://discuss.konghq.com/t/best-way-to-implement-this-flow-with-kong/3509/2 "2019-05-14T05:22:07Z")
These two in combination should help you succeed in your goals šŸ™‚ This plugin controls the whole pass me a JWT token to validate who the user is bit: > **[Open-Source API Management and Microservice Management](https://docs.konghq.com/hub/kong-inc/jwt/)** > > Secure, Manage & Extend your APIs or Microservices with plugins for authentication, logging, rate-limiting, transformations and more. This plugin helps the authorization side of things after the user has been identified by jwt: > **[Open-Source API Management and Microservice Management](https://docs.konghq.com/hub/kong-inc/acl/)** > > Secure, Manage & Extend your APIs or Microservices with plugins for authentication, logging, rate-limiting, transformations and more. Hope that helps, Jeremy