What problem does it solve?
Authenticate API requests to APISIX by validating JSON Web Tokens (JWT) with the a6 CLI, enabling consistent consumer identity verification across routes and services.
Core Features & Use Cases
- JWT validation against a configured credential (supporting HS256, RS256, PS256, ES256, and EdDSA)
- Consumer binding: tie JWT credentials to APISIX consumers for streamlined access control
- Flexible token lookup: extract tokens from HTTP headers, query parameters, or cookies
- Claim verification and clock skew tolerance (exp, nbf, and configurable grace period)
- Key management: provide shared secrets or public keys for asymmetric algorithms, with token enforcement on protected routes
- Use Case: protect a route behind jwt-auth to ensure only tokens issued by your auth server grant access
Quick Start
Create a consumer, add a jwt-auth credential, attach the plugin to a route, and issue a JWT to test authentication.