envoyproxy / envoyproxy/gateway
Configuring User Agent for remote JWKS fetch
- Dominant language
- Go
- Stars
- 3k
- Forks
- 864
- Avg merge
- 2d 2h
- Merged PRs (30d)
- 140
Description
*Description*:
When using JWT authentication via SecurityPolicy and remote JWKS, envoy gateway fetches the keys from the configured endpoint. It looks like these calls are done with user agent `Go-browser`. It would be nice if this wa a bit more specific (e.g. `Envoy Gateway`) or even better, configurable for the user.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start at the Go code path that fetches remote JWKS for JWT authentication configured through SecurityPolicy, and inspect where the current `Go-browser` user agent is set. Done means remote JWKS requests use a more specific or user-configurable user agent, with the behavior verified in the relevant tests if present.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 58/100