Authentication

The gateway supports JWT authentication, configurable through the TOML file:

[authentication.providers.jwt]
name = "my-authenticator"

[authentication.providers.jwt.jwks]
url = "https://example.com/.well-known/jwks.json"
issuer = "example.com"
audience = "my-project"
poll_interval = 60

[authentication.providers.jwt.header]
name = "Authorization"
value_prefix = "Bearer "

• The name field specifies the name of the authenticator.
• The jwks section specifies the URL of the JWKS endpoint, the issuer, and the audience. The poll_interval specifies how often the JWKS endpoint should be polled for updates.
• The header section specifies the header name and value prefix for the JWT token.

Read more about JWT authentication.