envoyproxy / envoyproxy/gateway
JWT authorization Issue
- Dominant language
- Go
- Stars
- 3k
- Forks
- 864
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 140
Description
*Description*:
When applying security policy for JWT it returning 200 response when passing different client token in same in tenant
Hi team ,
i'm using 1.5.6 verison of envoy gateway and install through helm and now i created security policy for JWT validation
apiVersion: [gateway.envoyproxy.io/v1alpha1](http://gateway.envoyproxy.io/v1alpha1)
kind: SecurityPolicy
metadata:
name: azure-policy
namespace: envoy-gateway-system
spec:
targetRef:
group: [gateway.networking.k8s.io](http://gateway.networking.k8s.io/)
kind: HTTPRoute
name: httpbin
jwt:
providers:
- name: azure
issuer: ****
audiences:
- ***
remoteJWKS:
uri: https://login.microsoftonline.com/***
# claimToHeaders:
# - claim: sub
# header: x-jwt-sub
# - claim: role
# header: x-jwt-role
i have created 2 token to validate this policy once is from mentioned client id in security policy and another is in different client id both are in same tenant only but different client id and both are giving same 200 response but it should fail / give 403 error when try with different client id which is not mentioned in that policy and is envoy dont have the feature to validate client id even its from same tenant but different client id ?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.