{"action":"created","issue":{"url":"https://api.github.com/repos/ExpressGateway/express-gateway.io/issues/117","repository_url":"https://api.github.com/repos/ExpressGateway/express-gateway.io","labels_url":"https://api.github.com/repos/ExpressGateway/express-gateway.io/issues/117/labels{/name}","comments_url":"https://api.github.com/repos/ExpressGateway/express-gateway.io/issues/117/comments","events_url":"https://api.github.com/repos/ExpressGateway/express-gateway.io/issues/117/events","html_url":"https://github.com/ExpressGateway/express-gateway.io/issues/117","id":256542102,"number":117,"title":"JWT Plugin: new token type within EG credential management and token service management","user":{"login":"altsang","id":2261105,"avatar_url":"https://avatars3.githubusercontent.com/u/2261105?v=4","gravatar_id":"","url":"https://api.github.com/users/altsang","html_url":"https://github.com/altsang","followers_url":"https://api.github.com/users/altsang/followers","following_url":"https://api.github.com/users/altsang/following{/other_user}","gists_url":"https://api.github.com/users/altsang/gists{/gist_id}","starred_url":"https://api.github.com/users/altsang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/altsang/subscriptions","organizations_url":"https://api.github.com/users/altsang/orgs","repos_url":"https://api.github.com/users/altsang/repos","events_url":"https://api.github.com/users/altsang/events{/privacy}","received_events_url":"https://api.github.com/users/altsang/received_events","type":"User","site_admin":false},"labels":[{"id":648926240,"url":"https://api.github.com/repos/ExpressGateway/express-gateway.io/labels/ready","name":"ready","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-09-10T21:34:57Z","updated_at":"2017-09-11T02:51:09Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"see #30 for part 1 of the JWT use case"},"comment":{"url":"https://api.github.com/repos/ExpressGateway/express-gateway.io/issues/comments/328402181","html_url":"https://github.com/ExpressGateway/express-gateway.io/issues/117#issuecomment-328402181","issue_url":"https://api.github.com/repos/ExpressGateway/express-gateway.io/issues/117","id":328402181,"user":{"login":"altsang","id":2261105,"avatar_url":"https://avatars3.githubusercontent.com/u/2261105?v=4","gravatar_id":"","url":"https://api.github.com/users/altsang","html_url":"https://github.com/altsang","followers_url":"https://api.github.com/users/altsang/followers","following_url":"https://api.github.com/users/altsang/following{/other_user}","gists_url":"https://api.github.com/users/altsang/gists{/gist_id}","starred_url":"https://api.github.com/users/altsang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/altsang/subscriptions","organizations_url":"https://api.github.com/users/altsang/orgs","repos_url":"https://api.github.com/users/altsang/repos","events_url":"https://api.github.com/users/altsang/events{/privacy}","received_events_url":"https://api.github.com/users/altsang/received_events","type":"User","site_admin":false},"created_at":"2017-09-11T02:51:09Z","updated_at":"2017-09-11T02:51:09Z","author_association":"CONTRIBUTOR","body":"`express-gateway-plugin-jwt`\n\n### New JWT Policy and Plugin Registration\nThe plugin will introduce a new auth policy - JWT.\n- plugin is registered under `system.config.yml` in the `plugins:` section \n- system wide parameters are specified underneath its entry\n  * querystring param that contain JWT - `jwt` = default\n  * claims to be verified (`iss` = key claim, required, `exp`, `nbf`)\n\n- a JWT policy can be declared in the `gateway.config.yml` in the `policies:` section which will allow the JWT policy to be used within a pipeline\n\n### New Credential Type\nThe plugin will extend EG credential management by introducing a new credential type known as JWT - (i.e. `jwt`, just like `basic`, `oauth2` etc)\n\n### JWT Credential Type \nThe new JWT credential type will need to contain the following:\n- keyId - auto generated (please refer to how key-auth works in EG for more info on how keys are generated)\n- verification algorithm: `HS256`, `RS256`, or `ES256`\n- rsa_public key: for RS256/ES256\n- keySecret:  auto generated (note: if the algo is HS256/ES256)"}}
{"actor":{"display_login":"altsang"}}