envoyproxy / envoyproxy/gateway

Configuring User Agent for remote JWKS fetch

Open
#9,512 1 comment 0 reactions 0 assignees View on GitHub
stale triage
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

*Description*:
When using JWT authentication via SecurityPolicy and remote JWKS, envoy gateway fetches the keys from the configured endpoint. It looks like these calls are done with user agent `Go-browser`. It would be nice if this wa a bit more specific (e.g. `Envoy Gateway`) or even better, configurable for the user.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start at the Go code path that fetches remote JWKS for JWT authentication configured through SecurityPolicy, and inspect where the current `Go-browser` user agent is set. Done means remote JWKS requests use a more specific or user-configurable user agent, with the behavior verified in the relevant tests if present.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
authentication, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.