# How to Kong ACL and JWT example

**URL:** <https://discuss.konghq.com/t/how-to-kong-acl-and-jwt-example/3375>\
**Category:** Questions\
**Tags:** kubernetes\
**Created:** [April 23, 2019, 2:04pm UTC](https://discuss.konghq.com/t/how-to-kong-acl-and-jwt-example/3375 "2019-04-23T14:04:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pgold30](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/pgold30/32/943_2.png) [@pgold30](https://discuss.konghq.com/u/pgold30)\
**Post date:** [April 23, 2019, 2:04pm UTC](https://discuss.konghq.com/t/how-to-kong-acl-and-jwt-example/3375/1 "2019-04-23T14:04:21Z")

</div>

Hi there, we have been using kong for some time now, and after some time I wrote a small guide on how to use acl with jwt token.

> **[Kong ACL example](https://medium.com/engineering-applift/kong-acl-example-77a033d59034)**
>
> First we will deploy one sample application, called cafe, that lets you order either tea via the tea service or coffee via the coffee…

Happy to hear your feedback!

---

<div class="post-metadata">

**Author:** ![jeremyjpj0916](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/jeremyjpj0916/32/1388_2.png) [@jeremyjpj0916](https://discuss.konghq.com/u/jeremyjpj0916)\
**Post date:** [April 23, 2019, 10:28pm UTC](https://discuss.konghq.com/t/how-to-kong-acl-and-jwt-example/3375/2 "2019-04-23T22:28:50Z")

</div>

Very nice, I know the process leveraging the ACL plugin and JWT plugin all to well myself too as a frequent user of those plugins and the OAuth2 😆 . Do you cache the JWT on your client side till its exp to minimize cpu utilization around crypto/token generation 😉 ?

---

<div class="post-metadata">

**Author:** ![pgold30](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/pgold30/32/943_2.png) [@pgold30](https://discuss.konghq.com/u/pgold30)\
**Post date:** [April 24, 2019, 8:38am UTC](https://discuss.konghq.com/t/how-to-kong-acl-and-jwt-example/3375/3 "2019-04-24T08:38:54Z")

</div>

Thanks Jeremy! we are not doing that at the moment but will take a look , makes sense to not decrypt the token each time , just found this actually [How can one succesfully implement cache in Kong](https://discuss.konghq.com/t/how-can-one-succesfully-implement-cache-in-kong/1203) 🙂