You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Aug 7, 2023. It is now read-only.
Copy file name to clipboardExpand all lines: README.md
+13-11Lines changed: 13 additions & 11 deletions
Original file line number
Diff line number
Diff line change
@@ -55,11 +55,12 @@ security:
55
55
main:
56
56
stateless: true
57
57
istio_jwt_authenticator:
58
-
- issuer: issuer_1 # Required
59
-
user_identifier_claim: sub #Default is `sub` claim
60
-
origin_token_headers: [authorization] #Required at least once of `origin_token_headers`, `origin_token_query_params` or `base64_headers`. Use this option when your Istio JWTRule CRD using `forwardOriginalToken`.
61
-
origin_token_query_params: [token] #Use this option when your Istio JWTRule CRD using `forwardOriginalToken` and your JWT token in query param.
62
-
base64_headers: [x-istio-jwt-payload] # Use this option when your Istio JWTRule CRD using `outputPayloadToHeader`.
58
+
rules:
59
+
- issuer: issuer_1 # Required
60
+
user_identifier_claim: sub #Default is `sub` claim
61
+
origin_token_headers: [authorization] #Required at least once of `origin_token_headers`, `origin_token_query_params` or `base64_headers`. Use this option when your Istio JWTRule CRD using `forwardOriginalToken`.
62
+
origin_token_query_params: [token] #Use this option when your Istio JWTRule CRD using `forwardOriginalToken` and your JWT token in query param.
63
+
base64_headers: [x-istio-jwt-payload] # Use this option when your Istio JWTRule CRD using `outputPayloadToHeader`.
63
64
```
64
65
65
66
In case your application have multi issuers:
@@ -69,11 +70,12 @@ In case your application have multi issuers:
69
70
main:
70
71
stateless: true
71
72
istio_jwt_authenticator:
72
-
- issuer: issuer_1
73
-
origin_token_headers: [authorization]
74
-
- issuer: issuer_2
75
-
user_identifier_claim: aud
76
-
base64_headers: [x-istio-jwt-payload]
73
+
rules:
74
+
- issuer: issuer_1
75
+
origin_token_headers: [authorization]
76
+
- issuer: issuer_2
77
+
user_identifier_claim: aud
78
+
base64_headers: [x-istio-jwt-payload]
77
79
#....
78
80
```
79
81
@@ -82,7 +84,7 @@ In case your application have multi issuers:
82
84
```shell
83
85
#!/bin/bash
84
86
85
-
#Generate mock JWT token forwarded by Istio sidecar
87
+
#Generate mock JWT token forwarded by Istio sidecar
0 commit comments