Including the module without setting directive blocks all requests

max-lt / nginx-jwt-module

NGINX module to check for a valid JWT.

MIT License

93 stars 38 forks source link

Including the module without setting directive blocks all requests #2

Closed max-lt closed 6 years ago

max-lt commented 6 years ago

Including the module without setting directive blocks all requests.

Currently if no auth_jwt directive is set the jwt_flag variable stays set to -1 (which is an incorrect state) and all requests (whose context is not overwritten) are rejected.

A workaround is to set auth_jwt=off on http context.