hasura
Supporting JWT and Webhook Auth Mode together
Today, auth modes are either JWT mode or Webhook mode, but we would ideally prefer to support both. The logic could be simple enough. If the request has an Authorization header beginning with Bearer, then treat it as a JWT auth request. Otherwise, forward to the webhook.
Today we're having to send all traffic to the webhook, including requests with simple JWTs. It would be great to avoid this hop.
I would also find this useful to auth web clients with JWT and api clients with webhook
@rahulagarwal13 Could you please add your two cents? This is a very valid use case and would make custom auth considerably easier, as it wouldn't be necessary to forward to a webhook for absolutely every request.
