higress icon indicating copy to clipboard operation
higress copied to clipboard

Add Whitelisted Paths Functionality to JWT Authentication Plugin

Open xiaoyue9527 opened this issue 1 year ago • 0 comments

Why do you need it? Our current JWT authentication plugin lacks the functionality to exclude certain paths from requiring authentication. This poses a challenge as there are specific endpoints that should be accessible without authentication. As a result, our workflow is affected, requiring additional workarounds to handle these cases.

How could it be? We need the ability to specify certain paths or endpoints that should be exempted from JWT authentication. This functionality would allow these paths to be accessed without the need for a valid token. The ideal implementation would involve a configuration option where we can define these paths within the plugin's settings or through a configuration file.

Other related information Currently, our authentication flow is based entirely on JWT, and having the ability to define an exclusion list for certain paths would greatly enhance the flexibility of our authentication mechanism. This would simplify the handling of public or non-sensitive endpoints that don't require authentication.

xiaoyue9527 avatar Jan 09 '24 07:01 xiaoyue9527