Description
If you are reporting any crash or any potential security issue, do not
open an issue in this repo. Please report the issue via emailing
[email protected] where the issue will be triaged appropriately.
Title: validating two tokens in the headers and ignoring one header if not present.
Description:
The requirement I have is to accept and additional token header named X-originating-api-authorization, validate it along with the default authorization header using same issuer but ignore the check if X-originating-api-authorization is not present.
I have tried to achieve this by using allow_missing: {} but it doesnt work.
Envoy config as follows:
rules:
- match: { prefix: "/" }
requires:
requires_all:
requirements:
- requires_any:
requirements:
- provider_name: xyz_auth_pageSize
- allow_missing: {}
- requires_any:
requirements:
- provider_name: xyz_auth0
- provider_name: xyz_abc_auth0
please help find a solution
[optional Relevant Links:]
https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/jwt_authn/v3/config.proto