envoyproxy / envoyproxy/gateway

JWT authorization Issue

Open
#7,633 2 comments 0 reactions 0 assignees View on GitHub
stale triage
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

*Description*:
When applying security policy for JWT it returning 200 response when passing different client token in same in tenant

Hi team ,
i'm using 1.5.6 verison of envoy gateway and install through helm and now i created security policy for JWT validation
apiVersion: [gateway.envoyproxy.io/v1alpha1](http://gateway.envoyproxy.io/v1alpha1)
kind: SecurityPolicy
metadata:
name: azure-policy
namespace: envoy-gateway-system
spec:
targetRef:
group: [gateway.networking.k8s.io](http://gateway.networking.k8s.io/)
kind: HTTPRoute
name: httpbin
jwt:
providers:
- name: azure
issuer: ****
audiences:
- ***
remoteJWKS:
uri: https://login.microsoftonline.com/***
# claimToHeaders:
# - claim: sub
# header: x-jwt-sub
# - claim: role
# header: x-jwt-role
i have created 2 token to validate this policy once is from mentioned client id in security policy and another is in different client id both are in same tenant only but different client id and both are giving same 200 response but it should fail / give 403 error when try with different client id which is not mentioned in that policy and is envoy dont have the feature to validate client id even its from same tenant but different client id ?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.