How to generate a dynamic jwt token using apisix, and the client must use a valid jwt token to access other interfaces through the apisix gateway

[myhgc]

Our system interface requires a token to access, and we want to use apisix to save a valid token. The client must use the token within the validity period to pass the apisix verification and call the system interface

[dosubot[bot]]

To generate a dynamic JWT token using APISIX and ensure that the client uses a valid token to access other interfaces, you can follow these steps:

1. Enable the jwt-auth Plugin: Create a Consumer object with the JWT token configuration using the Admin API:

   curl http://127.0.0.1:9180/apisix/admin/consumers -H 'X-API-KEY: your-api-key' -X PUT -d '  
   {  
       "username": "jack",  
       "plugins": {  
           "jwt-auth": {  
               "key": "user-key",  
               "secret": "my-secret-key"  
           }  
       }  
   }'

2. Configure a Route for JWT Authentication: Set up a route that requires JWT authentication by associating it with the jwt-auth plugin:

   curl http://127.0.0.1:9180/apisix/admin/routes/1 -H 'X-API-KEY: your-api-key' -X PUT -d '  
   {  
       "methods": ["GET"],  
       "uri": "/index.html",  
       "plugins": {  
           "jwt-auth": {}  
       },  
       "upstream": {  
           "type": "roundrobin",  
           "nodes": {  
               "127.0.0.1:1980": 1  
           }  
       }  
   }'

3. Generate a JWT Token: Use the /apisix/plugin/jwt/sign endpoint to generate a JWT token. You can expose this endpoint using the public-api plugin:

   curl http://127.0.0.1:9180/apisix/admin/routes/jas -H 'X-API-KEY: your-api-key' -X PUT -d '  
   {  
       "uri": "/apisix/plugin/jwt/sign",  
       "plugins": {  
           "public-api": {}  
       }  
   }'

   Then, request a token:

   curl http://127.0.0.1:9080/apisix/plugin/jwt/sign?key=user-key -i

4. Use the JWT Token: Once you have the token, use it to access other interfaces through the APISIX gateway by including it in the request header, query string, or cookie:

   curl http://127.0.0.1:9080/index.html -H 'Authorization: Bearer your-jwt-token' -i

By following these steps, you can generate and use a dynamic JWT token with APISIX, ensuring secure access to your services ^[1][2].

To continue talking to Dosu, mention @dosu.

[myhgc]

@Dusu 3、Generate a JWT Token
I have configured the routing in the Dashboard, but the call returns a 404 Not Found。Below is my routing configuration
{
"uri": "/gen_token",
"name": "gettoken",
"desc": "get jwt token",
"methods": [
"GET",
"POST",
"PUT",
"DELETE",
"PATCH",
"HEAD",
"OPTIONS",
"CONNECT",
"TRACE",
"PURGE"
],
"host": "openapi.com",
"plugins": {
"public-api": {
"uri": "/apisix/plugin/jwt/sign"
}
},
"labels": {
"API_VERSION": "V1"
},
"status": 1
}

[myhgc]

sorry ,/apisix/plugin/jwt/sign just support get method!

[mikyll]

@myhgc

The jwt-auth public API was removed in APISIX v3.11.0:

remove JWT signing endpoint and no longer require a private key to be uploaded in the jwt-auth plugin. #11597

The exact commit is 1773655