2023-05-19 22:14:16 +00:00
|
|
|
{
|
|
|
|
"name": "envoy.filters.http.jwt_authn",
|
|
|
|
"typedConfig": {
|
|
|
|
"@type": "type.googleapis.com/envoy.extensions.filters.http.jwt_authn.v3.JwtAuthentication",
|
|
|
|
"providers": {
|
|
|
|
"okta": {
|
|
|
|
"issuer": "test-issuer",
|
2023-05-30 17:38:33 +00:00
|
|
|
"payloadInMetadata": "jwt_payload_okta",
|
|
|
|
"remoteJwks": {
|
|
|
|
"httpUri": {
|
|
|
|
"uri": "https://example-okta.com/.well-known/jwks.json",
|
|
|
|
"cluster": "jwks_cluster",
|
|
|
|
"timeout": "1s"
|
|
|
|
},
|
|
|
|
"asyncFetch": {
|
|
|
|
"fastListener": true
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"okta_0": {
|
|
|
|
"issuer": "test-issuer",
|
|
|
|
"payloadInMetadata": "jwt_payload_okta_0",
|
2023-05-19 22:14:16 +00:00
|
|
|
"remoteJwks": {
|
|
|
|
"httpUri": {
|
|
|
|
"uri": "https://example-okta.com/.well-known/jwks.json",
|
|
|
|
"cluster": "jwks_cluster",
|
2023-05-24 14:30:48 +00:00
|
|
|
"timeout": "1s"
|
2023-05-19 22:14:16 +00:00
|
|
|
},
|
|
|
|
"asyncFetch": {
|
|
|
|
"fastListener": true
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"auth0": {
|
|
|
|
"issuer": "another-issuer",
|
2023-05-30 17:38:33 +00:00
|
|
|
"payloadInMetadata": "jwt_payload_auth0",
|
2023-05-19 22:14:16 +00:00
|
|
|
"remoteJwks": {
|
|
|
|
"httpUri": {
|
|
|
|
"uri": "https://example-auth0.com/.well-known/jwks.json",
|
|
|
|
"cluster": "jwks_cluster",
|
2023-05-24 14:30:48 +00:00
|
|
|
"timeout": "1s"
|
2023-05-19 22:14:16 +00:00
|
|
|
},
|
|
|
|
"asyncFetch": {
|
|
|
|
"fastListener": true
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"rules": [
|
|
|
|
{
|
|
|
|
"match": {
|
2023-05-30 17:38:33 +00:00
|
|
|
"prefix": "some-special-path"
|
2023-05-19 22:14:16 +00:00
|
|
|
},
|
|
|
|
"requires": {
|
2023-05-30 17:38:33 +00:00
|
|
|
"providerName": "okta_0"
|
2023-05-19 22:14:16 +00:00
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"match": {
|
|
|
|
"prefix": "/"
|
|
|
|
},
|
|
|
|
"requires": {
|
|
|
|
"providerName": "okta"
|
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"match": {
|
|
|
|
"prefix": "/"
|
|
|
|
},
|
|
|
|
"requires": {
|
|
|
|
"providerName": "auth0"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
}
|