search

edenspiekermann / craft-jwt-auth

Enable authentication to Craft through the use of Javascript Web Tokens (JWT)
MIT License
5 stars 16 forks source link

🚀 Ability to change what header it reads the JWT from #12

Open devinellis opened 4 years ago

devinellis commented 4 years ago

It would be great if the Authorization header was an option that could be overwritten.

I found your plugin while researching ways to secure and streamline the Craft CP. We use Cloudflare and they offer a feature called Access that handles SSO at the edge, and once authorized makes the backend request with the header Cf-Access-Jwt-Assertion. I think this would just "work" if the header this plugin checks was configurable.