spring-jwt-gateway's Introduction

spring-jwt-gateway

A JWT based authentication api gateway based on Spring Cloud Gateway

This api gateway can be used to provide a central place to authenticate JWT token for all the back-ends services, and if the request is authenticated, this gateway will add 'X-jwt-sub=xxx' in the request http header, then all the backend services can use this customized header to do its own authorization. The 'X-jwt-sub' header value is extracted from the provided JWT token.

This is still under development until the Spring Cloud Gateway 2.0 officially released.

Road Map:

Support JWT RSA256 and HMAC algorithm. Right now only RSA256 is supported to verify JWT token.
Support to inject more JWT fields (issuer, expire_at) in the header.
Support official Spring Cloud Gateway 2.0.
Change the configuration more easy.
Support Docker.
Support Rate Limiter.

Get Started:

git checkout and run maven install
modify the application.yaml file example for your needs
you must provide 2 environment variables: '${jwt.issuer}' and '${jwt.audience}' when launching this app
then enjoy

spring-jwt-gateway's People

Contributors

Stargazers

Watchers

spring-jwt-gateway's Issues

Consider defining a bean of type 'com.auth0.jwt.JWTVerifier' in your configuration.

start error：

Error starting ApplicationContext. To display the conditions report re-run your application with 'debug' enabled.
Disconnected from the target VM, address: '127.0.0.1:62095', transport: 'socket'
2018-05-31 20:15:17.522 ERROR 10627 --- [           main] o.s.b.d.LoggingFailureAnalysisReporter   : 

***************************
APPLICATION FAILED TO START
***************************

Description:

Parameter 0 of constructor in com.acm.infra.proxy.JWTFilter required a bean of type 'com.auth0.jwt.JWTVerifier' that could not be found.


Action:

Consider defining a bean of type 'com.auth0.jwt.JWTVerifier' in your configuration.