Skip to main content

JWT

JWT middleware configuration can be found here.

This is cookbook for:

  • JWT authentication using HS256 algorithm.
  • JWT is retrieved from Authorization request header.

Server

Using custom claims

cookbook/jwt/custom-claims/server.go
loading...

Using a user-defined KeyFunc

cookbook/jwt/user-defined-keyfunc/server.go
loading...

Client

Login

Login using username and password to retrieve a token.

curl -X POST -d 'username=jon' -d 'password=shhh!' localhost:1323/login

Response

{
"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE0NjE5NTcxMzZ9.RB3arc4-OyzASAaUhC2W3ReWaXAt_z2Fd3BN4aWTgEY"
}

Request

Request a restricted resource using the token in Authorization request header.

curl localhost:1323/restricted -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE0NjE5NTcxMzZ9.RB3arc4-OyzASAaUhC2W3ReWaXAt_z2Fd3BN4aWTgEY"

Response

Welcome Jon Snow!