mirror of https://github.com/status-im/consul.git
66 lines
1.6 KiB
Plaintext
66 lines
1.6 KiB
Plaintext
{
|
|
"name": "envoy.filters.http.jwt_authn",
|
|
"typedConfig": {
|
|
"@type": "type.googleapis.com/envoy.extensions.filters.http.jwt_authn.v3.JwtAuthentication",
|
|
"providers": {
|
|
"okta": {
|
|
"issuer": "test-issuer",
|
|
"payloadInMetadata": "jwt_payload_okta",
|
|
"remoteJwks": {
|
|
"httpUri": {
|
|
"uri": "https://example-okta.com/.well-known/jwks.json",
|
|
"cluster": "jwks_cluster_okta",
|
|
"timeout": "1s"
|
|
},
|
|
"asyncFetch": {
|
|
"fastListener": true
|
|
}
|
|
}
|
|
},
|
|
"auth0": {
|
|
"issuer": "another-issuer",
|
|
"payloadInMetadata": "jwt_payload_auth0",
|
|
"remoteJwks": {
|
|
"httpUri": {
|
|
"uri": "https://example-auth0.com/.well-known/jwks.json",
|
|
"cluster": "jwks_cluster_auth0",
|
|
"timeout": "1s"
|
|
},
|
|
"asyncFetch": {
|
|
"fastListener": true
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"rules": [
|
|
{
|
|
"match": {
|
|
"prefix": "/"
|
|
},
|
|
"requires": {
|
|
"requiresAll": {
|
|
"requirements": [
|
|
{
|
|
"requiresAny": {
|
|
"requirements": [
|
|
{"providerName": "okta"},
|
|
{"allowMissingOrFailed": {}}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"requiresAny": {
|
|
"requirements": [
|
|
{"providerName": "auth0"},
|
|
{"allowMissingOrFailed": {}}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
|
|
}
|
|
}
|
|
]
|
|
}
|
|
} |