developer-delphi-horse-jwt

What problem does it solve?

Middleware that validates JWT Bearer tokens in the Authorization header before executing the route handler for Delphi Horse-based applications. It enables seamless protection of API endpoints by enforcing token validation, subject/audience/issued-at/expiration checks, and optional per-route configuration.

Core Features & Use Cases

• Global middleware availability via HorseJWT(secret) that protects all routes
• THorseJWTConfig supports SkipRoutes, Header, IsRequiredSubject, IsRequiredIssuedAt, IsRequiredNotBefore, IsRequiredExpirationTime, IsRequireAudience, ExpectedAudience, and SessionClass
• Read claims in handlers via Req.Session<TJWT> to access subject, expiration, and other claims
• Integration with delphi-jose-jwt / JOSE.Core.JWT dependencies; supports per-route and global protection

Quick Start

Use HorseJWT with a secret to protect an endpoint by applying THorseJWTConfig with required claims and (optional) public routes.