Skip to content

For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

Simple JWT

Page as Markdown
Verify JWTs and control access by using the open source jwtAuth field and a GatewayExtension.
Simple JWT uses the open source jwtAuth field and a GatewayExtension to verify tokens and authorize requests. JWT authentication is enforced before any external authentication. Use this approach when you do not need to control when the JWT check runs relative to external auth. For configurable enforcement phases and other enterprise controls, see Staged JWT.
Basic JWT policy
Enforce JWT authentication using the open-source TrafficPolicy and GatewayExtension resources.
Restrict access with claim-based rules
Allow or deny requests based on JWT claims by using a CEL rbac policy.
OverviewStaged JWT
Was this page helpful?