Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

JWT as apikey enhancements #64

Closed
4 tasks done
mathieuancelin opened this issue Mar 1, 2018 · 0 comments
Closed
4 tasks done

JWT as apikey enhancements #64

mathieuancelin opened this issue Mar 1, 2018 · 0 comments
Assignees
@mathieuancelin
Labels
enhancement security
Milestone
v1.1.0

Comments

@mathieuancelin
Copy link
Member

mathieuancelin commented Mar 1, 2018 •
edited
Loading

  • JWT apikey can be passed in Authorization: Bearer header
  • JWT apikey can be passed in Otoroshi-Authorization: Bearer header
  • apikey clientId should be passed using standard iss field instead of custom clientId
  • original JWT token should be passed to target if in Authorization header
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mathieuancelin mathieuancelin

Labels
enhancement security
Projects
None yet
Milestone
v1.1.0
Development

No branches or pull requests
1 participant
@mathieuancelin