search

pulibrary / princeton_ansible

Ansible Roles and Playbooks for Princeton University Library
10 stars 4 forks source link

use JWT with nginxplus #2761

Open kayiwa opened 2 years ago

kayiwa commented 2 years ago

Honeybadger provides us with auth headers which can be used to authenticate when services are restricted to princeton. Can we use JWT for this?

hackartisan commented 2 years ago

Can you expand this use case? I'm not getting the whole scenario.

kayiwa commented 2 years ago

Hey @hackartisan we have services that aren't ready for public viewing. The specific case here is our pdc-discovery service. We want to monitor it via honeybadger's uptime. Honeybadger will not give us the source of their IPs checks to add to the firewall. They will provide authentication of uptime check requests using Honeybadger-Token header, which contains a secret token that’s sent with each request. This will need us to setup JWT. If this works I suspect other new uses will arise.

hackartisan commented 2 years ago

👍🏻 thanks!