Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ustream Header "X-Anonymous-Consumer": "true" is set even if authentication with jwt token was successfully #4

Open
Gruummy opened this issue Aug 10, 2023 · 1 comment
Labels
bug Something isn't working

Comments

@Gruummy
Copy link
Collaborator

Gruummy commented Aug 10, 2023

Documentation of the official "jwt" plugin clearly tells that this header should only be true if anonymous access was used to forward the request.
(This plugin here is only a "Extension" of the official "jwt" kong plugin ... and should follow the base functionality of it)

see: https://docs.konghq.com/hub/kong-inc/jwt/

I my testcases i can see for example the following on the upstream service behind kong:

"X-Anonymous-Consumer": "true", "X-Consumer-Custom-Id": "f2cd6020-e3b3-4027-ab3e-968e7c436ef6", "X-Consumer-Id": "bb91d867-66ff-4f51-8d92-8c35a13efee5", "X-Consumer-Username": "f2cd6020-e3b3-4027-ab3e-968e7c436ef6",

Here you can see that a consumer user was used and authenticated .. so "X-Anonymous-Consumer" should be "false" in this case .... or the header probably not exist at all. I personally would vote to have the header with the value "false".

@Gruummy Gruummy added the bug Something isn't working label Aug 10, 2023
@Gruummy
Copy link
Collaborator Author

Gruummy commented Aug 19, 2023

Investigation on other plugins for kong showed that here meanwhile code logics had been changed.
I am not sure if with the merge request which is already done .. this not already is solved.

But when i rework the integrationtests in general about the keycloak 18 test issue ... i will add for this situation also a test with the behaviour like it should be ... from kongs perspective.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant