Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question about validating two tokens in the headers and ignoring one header if not present. #34308

Open
vlakka1 opened this issue May 22, 2024 · 1 comment
Labels
area/jwt_authn help wanted Needs help! question Questions that are neither investigations, bugs, nor enhancements

Comments

@vlakka1
Copy link

vlakka1 commented May 22, 2024

If you are reporting any crash or any potential security issue, do not
open an issue in this repo. Please report the issue via emailing
envoy-security@googlegroups.com where the issue will be triaged appropriately.

Title: validating two tokens in the headers and ignoring one header if not present.

Description:
The requirement I have is to accept and additional token header named X-originating-api-authorization, validate it along with the default authorization header using same issuer but ignore the check if X-originating-api-authorization is not present.

I have tried to achieve this by using allow_missing: {} but it doesnt work.

Envoy config as follows:
rules:
- match: { prefix: "/" }
requires:
requires_all:
requirements:
- requires_any:
requirements:
- provider_name: xyz_auth_pageSize
- allow_missing: {}
- requires_any:
requirements:
- provider_name: xyz_auth0
- provider_name: xyz_abc_auth0

please help find a solution
[optional Relevant Links:]
https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/jwt_authn/v3/config.proto

@vlakka1 vlakka1 added the triage Issue requires triage label May 22, 2024
@zuercher zuercher added question Questions that are neither investigations, bugs, nor enhancements help wanted Needs help! area/jwt_authn and removed triage Issue requires triage labels May 23, 2024
@zuercher
Copy link
Member

cc @TAOXUY @lizan

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/jwt_authn help wanted Needs help! question Questions that are neither investigations, bugs, nor enhancements
Projects
None yet
Development

No branches or pull requests

2 participants