Add from_cookies filed for JWTRule

istio · Oct 10, 2022 · 7cbffcd · 7cbffcd
1 parent 0d6e2d4
commit 7cbffcd
Show file tree

Hide file tree

Showing 6 changed files with 87 additions and 15 deletions.
diff --git a/kubernetes/customresourcedefinitions.gen.yaml b/kubernetes/customresourcedefinitions.gen.yaml
diff --git a/security/v1beta1/jwt.gen.json b/security/v1beta1/jwt.gen.json
diff --git a/security/v1beta1/jwt.pb.go b/security/v1beta1/jwt.pb.go
diff --git a/security/v1beta1/jwt.pb.html b/security/v1beta1/jwt.pb.html
diff --git a/security/v1beta1/jwt.proto b/security/v1beta1/jwt.proto
@@ -136,6 +136,18 @@ message JWTRule {
   // such requests is undefined.
   repeated string from_params = 7;
 
+  // List of Cookie names from which JWT is expected. For example, if JWT is provided via Cookie header value
+  // (e.g `Cookie: auth-token=<JWT>;`)
+  //
+  // ```yaml
+  //   fromCookies:
+  //   - "auth-token"
+  // ```
+  //
+  // Note: Requests with multiple tokens (at different locations) are not supported, the output principal of
+  // such requests is undefined.
+  repeated string from_cookies = 11;
+
   // This field specifies the header name to output a successfully verified JWT payload to the
   // backend. The forwarded data is `base64_encoded(jwt_payload_in_JSON)`. If it is not specified,
   // the payload will not be emitted.

diff --git a/security/v1beta1/request_authentication.gen.json b/security/v1beta1/request_authentication.gen.json