Skip to content

Commit 9148871

Browse files
authored
Merge pull request #52956 from rh-tokeefe/OSSMDOC-725
OSSMDOC-725: Assist with dev update to doc
2 parents 29c3dc2 + 5aab45e commit 9148871

File tree

2 files changed

+37
-37
lines changed

2 files changed

+37
-37
lines changed

modules/ossm-threescale-webassembly-module-examples-for-credentials-use-cases.adoc

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -163,19 +163,19 @@ For {SMProductShortName} and the 3scale Istio adapter, you must deploy a `Reques
163163
[source,yaml]
164164
----
165165
apiVersion: security.istio.io/v1beta1
166-
kind: RequestAuthentication
167-
metadata:
168-
name: jwt-example
169-
namespace: bookinfo
170-
spec:
171-
selector:
172-
matchLabels:
173-
app: productpage
174-
jwtRules:
175-
- issuer: >-
176-
http://keycloak-keycloak.34.242.107.254.nip.io/auth/realms/3scale-keycloak
177-
jwksUri: >-
178-
http://keycloak-keycloak.34.242.107.254.nip.io/auth/realms/3scale-keycloak/protocol/openid-connect/certs
166+
kind: RequestAuthentication
167+
metadata:
168+
name: jwt-example
169+
namespace: bookinfo
170+
spec:
171+
selector:
172+
matchLabels:
173+
app: productpage
174+
jwtRules:
175+
- issuer: >-
176+
http://keycloak-keycloak.34.242.107.254.nip.io/auth/realms/3scale-keycloak
177+
jwksUri: >-
178+
http://keycloak-keycloak.34.242.107.254.nip.io/auth/realms/3scale-keycloak/protocol/openid-connect/certs
179179
----
180180

181181
When you apply the `RequestAuthentication`, it configures `Envoy` with a link:https://www.envoyproxy.io/docs/envoy/v1.19.0/api-v3/extensions/filters/http/jwt_authn/v3/config.proto.html[native plug-in] to validate `JWT` tokens. The proxy validates everything before running the module so any requests that fail do not make it to the 3scale WebAssembly module.

modules/ossm-threescale-webassembly-module-minimal-working-configuration.adoc

Lines changed: 24 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -42,30 +42,30 @@ spec:
4242
token: service_token
4343
authorities:
4444
- "*"
45-
credentials:
46-
app_id:
47-
- header:
48-
keys:
49-
- app_id
50-
- query_string:
51-
keys:
52-
- app_id
53-
- application_id
54-
app_key:
55-
- header:
56-
keys:
57-
- app_key
58-
- query_string:
59-
keys:
60-
- app_key
61-
- application_key
62-
user_key:
63-
- query_string:
64-
keys:
65-
- user_key
66-
- header:
67-
keys:
68-
- user_key
45+
credentials:
46+
app_id:
47+
- header:
48+
keys:
49+
- app_id
50+
- query_string:
51+
keys:
52+
- app_id
53+
- application_id
54+
app_key:
55+
- header:
56+
keys:
57+
- app_key
58+
- query_string:
59+
keys:
60+
- app_key
61+
- application_key
62+
user_key:
63+
- query_string:
64+
keys:
65+
- user_key
66+
- header:
67+
keys:
68+
- user_key
6969
mapping_rules:
7070
- method: GET
7171
pattern: "/"

0 commit comments

Comments
 (0)