You can configure the gm-jwt-security service to search an LDAP server for user payloads. To use LDAP as a backend service, refer to the following configuration options.

Enable LDAP Configuration

To enable, USE_LDAP must be set to true.

Questions

You can deploy the Grey Matter JSON Web Token (JWT) Service many ways, including the following:

• The preferred approach is to deploy via a Docker container running inside of an OpenShift or Kubernetes Pod.

• The service is also packaged as a TAR file. The TAR contains an executable binary file you can deploy to a server.

Follow the configuration requirements below to set up the Grey Matter JWT Security service.

Prerequisites

Environment Variables

There are three required pieces of information to configure and run the service.

• Set JWT_API_KEY as an environment variable

• Set PRIVATE_KEY and USERS_JSON as a base64 encoded string, or as a volume mount (recommended)

• If both are provided, the volume mount supersedes the set variable

JWT_API_KEY is the base64 encoding of a comma separated list of API keys.

The users.json file should have a users field that contains an array of user payloads. This is an example:

Example

For the API key, list: 123,my-special-key,super-secret-key,pub-keyandJWT_API_KEY set to the value of:

Any service that provides the header api-key with a value matching one of the following will have access:

• 123

• my-special-key

• super-secret-key

Redis

The gm-jwt-security services creates and writes jwt tokens to a Redis server. In order to successfully generate and store jwt tokens, a Redis client must be implemented to connect to a server using information from the following environment variables.

Optional Configuration

The following environment variables can be set to specify the host, ports, and logging capabilities of the gm-jwt-service. To specify an expiration time for generated tokens, set TOKEN_EXP_TIME.

Configure LDAP

The gm-jwt-security service supports as a backend server to search for user payloads.

Configure TLS

TLS can be configured on the gm-jwt-security service using .

Questions

To enable TLS support for the service, perform the following steps:

1. Set ENABLE_TLS to true

2. Specify cert, trust, and key either through a volume mount (recommended) or the following environment variables.

Enable TLS Configuration

Questions