JWT Recipe

JWT middleware configuration can be found here.

This is cookbook for:

  • JWT authentication using HS256 algorithm.
  • JWT is retrieved from Authorization request header.

Server using custom claims 🔗

server.go



Server using a user-defined KeyFunc 🔗

server.go



Client 🔗

curl

Login 🔗

Login using username and password to retrieve a token.

curl -X POST -d 'username=jon' -d 'password=shhh!' localhost:1323/login

Response

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE0NjE5NTcxMzZ9.RB3arc4-OyzASAaUhC2W3ReWaXAt_z2Fd3BN4aWTgEY"
}

Request 🔗

Request a restricted resource using the token in Authorization request header.

curl localhost:1323/restricted -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE0NjE5NTcxMzZ9.RB3arc4-OyzASAaUhC2W3ReWaXAt_z2Fd3BN4aWTgEY"

Response

Welcome Jon Snow!

Source Code