Skip to content

Conversation

@EliuX
Copy link
Contributor

@EliuX EliuX commented Apr 22, 2020

In this PR we are requiring authenticated users using JWT. To do so, we are using the library PyJWT, so in every request to the API we expect a header Authorization with a format like

Bearer
In the Swagger UI, you will now see a new button called "Authorize":
image
when you click it then you will be notified that you must enter the content of the Authorization header, as mentioned before:
image
Click "Authorize" and then close that dialog. From that moment forward you will not have to do it anymore because the Swagger UI will use that JWT in every call, e.g.
image

If you want to check out the data (claims) that your JWT contains, you can also use the CLI of PyJWT:

pyjwt decode --no-verify "<JWT>"

Remember that the API is not verifying the authenticity of the JWT, but the API Management.
There is also an additional commit fixing most of our tests in order to adapt to these new requirements.

@EliuX EliuX force-pushed the feature/enforce-authentication-by-jwt#94 branch from 6f07527 to 7efc921 Compare April 22, 2020 17:18
@EliuX EliuX merged commit 0411324 into master Apr 22, 2020
@EliuX EliuX deleted the feature/enforce-authentication-by-jwt#94 branch April 22, 2020 21:00
@EliuX EliuX self-assigned this Apr 28, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants