jwt_authn: Add functionality to remove query parameter containing JWT (#34418)

Setting forward as false in JWT Authn filter config removes the JWT from headers, but doesn't remove JWT from query params or cookies. This change adds functionality to remove query parameters based on forward config

Risk Level: Low
Testing: Unit Testing

Signed-off-by: Arul Thileeban Sagayam <arul.thilee@gmail.com>

Mirrored from https://github.com/envoyproxy/envoy @ ee075b7c2a5f8449bfc17fbab94010696d3ed052
main
update-envoy[bot] 8 months ago
parent 28e7c15efc
commit 9ca33e5063
  1. 2
      envoy/extensions/filters/http/jwt_authn/v3/config.proto

@ -191,7 +191,7 @@ message JwtProvider {
// If false, the JWT is removed in the request after a success verification. If true, the JWT is
// not removed in the request. Default value is false.
// caveat: only works for from_header & has no effect for JWTs extracted through from_params & from_cookies.
// caveat: only works for from_header/from_params & has no effect for JWTs extracted through from_cookies.
bool forward = 5;
// Two fields below define where to extract the JWT from an HTTP request.

Loading…
Cancel
Save