search

TeslaGov / ngx-http-auth-jwt-module

Secure your NGINX locations with JWT
MIT License
310 stars 119 forks source link

Joefitz/validate authorization header #12

Closed fitzyjoe closed 6 years ago

fitzyjoe commented 6 years ago

If an Authorization header exists, it must be equal to the JWT after a prefix of "Bearer " or the usual redirect is returned. There is an additional test for this new feature.

fitzyjoe commented 6 years ago

@craigpell I actually stole that method, and its comments from here. Probably written by Russians! I will correct the comments.

https://www.nginx.com/resources/wiki/start/topics/examples/headers_management/?highlight=http%20settings

fitzyjoe commented 6 years ago

I cleaned up the tests @kevinmichaelchen