Overview

Custom JWT Auth traefik plugin.

Features

  • Configure remote JWT Auth endpoint with GuardURL param
  • Enable debug mode with Debug param

How It Works

  1. Intercepts incoming HTTP requests
  2. Extracts the Authorization header containing a Bearer token
  3. Sends validation request to the configured Guard service with:
    • Token URL and service data
    • Host: identity header
    • Content-Type: application/json
  4. Grants access on 200 OK response from Guard service
  5. Returns 403 Forbidden for missing tokens or failed validation

Configuration

Option Type Required Description
GuardURL string Yes URL of the identity access checker service
Debug bool No Enable debug logging for troubleshooting