graphql-engine icon indicating copy to clipboard operation
graphql-engine copied to clipboard

Allow unsigned (alg: none) JWT tokens

Open siddhatiwari opened this issue 4 years ago • 16 comments

I'm using the firebase auth emulator for local development which produces unsigned tokens. I'm running the firebase auth emulator and hasura (v1.3.3) locally using docker. It seems that hasura views the unsigned tokens using the recommended HASURA_GRAPHQL_JWT_SECRET for firebase as invalid. When I remove the HASURA_GRAPHQL_JWT_SECRET, all requests are defaulted to the anonymous role, which doesn't represent the actual role of the user from the unsigned token.

Is there a flag to allow using unsigned JWT tokens for development purposes? Or am I missing something with my configuration?

Hasura has been a major productivity boost for me! Just having this small issue setting up my local environment

siddhatiwari avatar Dec 13 '20 11:12 siddhatiwari