hashicorp/vault-plugin-auth-jwt

A Vault plugin to allow authentication via JWT (and OIDC) tokens

Stars: 107
Forks: 73
Open beginner issues: 0
Indexed issues: 42
Avg merge: 13h 49m
Merged PRs (30d): 7

Dominant language: Go
License: MPL-2.0
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 17, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

42 open issues indexed

JWT external group is not created after a successfull login Open

hashicorp/vault-plugin-auth-jwt#17 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Azure OIDC fails if using custom signing keys Open

hashicorp/vault-plugin-auth-jwt#75 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
OIDC URL encoding bug in `allowed_redirect_uris` with nested namespaces Open

hashicorp/vault-plugin-auth-jwt#81 · 2 comments · 3 reactions · 1 assignee · Indexed Sep 17, 2026
Support for JWT and OIDC roles at the same mount path Open

enhancement

hashicorp/vault-plugin-auth-jwt#84 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 17, 2026
Support Client Auth Certificate in OIDCTokenRequest Endpoint Open

hashicorp/vault-plugin-auth-jwt#93 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support OAuth 2.0 device flow Open

hashicorp/vault-plugin-auth-jwt#103 · 8 comments · 8 reactions · 0 assignees · Indexed Sep 17, 2026
allow non-string values (and arrays) in claim_mappings Open

hashicorp/vault-plugin-auth-jwt#109 · 3 comments · 9 reactions · 0 assignees · Indexed Sep 17, 2026
Handling of JWTs with no nbf (Not Before) claim Open

hashicorp/vault-plugin-auth-jwt#110 · 0 comments · 3 reactions · 0 assignees · Indexed Sep 17, 2026
Support public OIDC clients without the client-secret defined Open

hashicorp/vault-plugin-auth-jwt#116 · 1 comment · 4 reactions · 0 assignees · Indexed Sep 17, 2026
Ability to fully customize the oidc discovery url Open

hashicorp/vault-plugin-auth-jwt#117 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Automatically match Group Alias with OIDC groups claim Open

hashicorp/vault-plugin-auth-jwt#121 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
JWT auth succeeds with a group-alias bounded to the OIDC mount_accessor Open

hashicorp/vault-plugin-auth-jwt#136 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
OIDC should support Authorization,Token and Userinfo endpoints if well-known configuration endpoint is not present on provider Open

hashicorp/vault-plugin-auth-jwt#169 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 17, 2026
[req] Configurable aliases independent from the user_claim Open

hashicorp/vault-plugin-auth-jwt#178 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 17, 2026
JWT validation fails after EKS OIDC provider's key rotation Open

hashicorp/vault-plugin-auth-jwt#181 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
vault CLI does not receive localhost:8250 redirect after auth Open

hashicorp/vault-plugin-auth-jwt#190 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Feature request: Add support for private_key_jwt as an alternative to client_secret Open

hashicorp/vault-plugin-auth-jwt#207 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[req] Ability to use JWT Role Name as Identity entity alias name Open

enhancement

hashicorp/vault-plugin-auth-jwt#217 · 2 comments · 6 reactions · 0 assignees · Indexed Sep 17, 2026
Feature request: Add option for getting additional claims from /userinfo endpoint for JWT authentication Open

hashicorp/vault-plugin-auth-jwt#242 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add ability to log in with specific policies Open

hashicorp/vault-plugin-auth-jwt#261 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 17, 2026
Add regex as an optional value for the `bound_claims_type` Open

hashicorp/vault-plugin-auth-jwt#262 · 0 comments · 4 reactions · 0 assignees · Indexed Sep 17, 2026
Feature Request: Add access_token as an Optional Parameter to /auth/jwt/login for Group Fetching Open

hashicorp/vault-plugin-auth-jwt#264 · 3 comments · 2 reactions · 0 assignees · Indexed Sep 17, 2026
Allow auth for OIDC tokens that do not contain a group claim Open

hashicorp/vault-plugin-auth-jwt#269 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Improper validation of role config Open

hashicorp/vault-plugin-auth-jwt#270 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
"'oidc_discovery_url' must be set for OIDC" when trying to use jwks_url Open

hashicorp/vault-plugin-auth-jwt#272 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Adding support for acr_values configuration of oidc Open

hashicorp/vault-plugin-auth-jwt#275 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
permission denied error Open

hashicorp/vault-plugin-auth-jwt#286 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Auth jwt plugin bypasses configured vault proxy in CLI Open

hashicorp/vault-plugin-auth-jwt#288 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Fail to verify a GitLab JWKS URL Open

hashicorp/vault-plugin-auth-jwt#294 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Intermittent error: claim "ref_protected" does not match any associated bound claim values Open

hashicorp/vault-plugin-auth-jwt#305 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Vault: api error: status code 400: error configuring token validator: keyset configuration error Open

hashicorp/vault-plugin-auth-jwt#306 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Using Openshift platform as OIDC provider Open

hashicorp/vault-plugin-auth-jwt#307 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
oidc login failes with wrap-ttl flag set Open

hashicorp/vault-plugin-auth-jwt#312 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[req] bound_claims notation allowing for the "and"ing of claims from a list Open

hashicorp/vault-plugin-auth-jwt#316 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 17, 2026
GitLab CI/CD Pipeline ID Token ACLing: Template claim information into token_policies Open

hashicorp/vault-plugin-auth-jwt#318 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add ability to map static values to metadata fields Open

hashicorp/vault-plugin-auth-jwt#344 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Negative matching of JWT claims Open

hashicorp/vault-plugin-auth-jwt#357 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Feature: Support authenticated OIDC discovery for Kubernetes-based deployments Open

hashicorp/vault-plugin-auth-jwt#367 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Float Truncation in JWT Auth Bound Claims Matching Open

hashicorp/vault-plugin-auth-jwt#376 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Unicode NFD/NFC Identity Collision in JWT Auth Open

hashicorp/vault-plugin-auth-jwt#377 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
OIDC auth method cannot use Azure Workload Identity for client authentication (requires static client secret) Open

hashicorp/vault-plugin-auth-jwt#405 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 17, 2026
Feature request: Support custom query parameters in OIDC authorize URL (auth_url_params) Open

hashicorp/vault-plugin-auth-jwt#406 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026

A short digest of beginner-friendly GitHub issues.