graphql-engine
graphql-engine copied to clipboard
Allow unsigned (alg: none) JWT tokens
I'm using the firebase auth emulator for local development which produces unsigned tokens. I'm running the firebase auth emulator and hasura (v1.3.3) locally using docker. It seems that hasura views the unsigned tokens using the recommended HASURA_GRAPHQL_JWT_SECRET
for firebase as invalid. When I remove the HASURA_GRAPHQL_JWT_SECRET
, all requests are defaulted to the anonymous
role, which doesn't represent the actual role of the user from the unsigned token.
Is there a flag to allow using unsigned JWT tokens for development purposes? Or am I missing something with my configuration?
Hasura has been a major productivity boost for me! Just having this small issue setting up my local environment