a6-plugin-jwt-auth

Overview

The jwt-auth plugin authenticates requests using JSON Web Tokens. Consumers register a key and secret (or public key for asymmetric algorithms). Clients include a signed JWT in the request header, query parameter, or cookie. APISIX validates the signature and claims, then forwards the request with consumer identity headers.

When to Use

• Token-based stateless authentication
• Asymmetric key verification (RS256, ES256, EdDSA) where APISIX only needs the public key
• Custom claims-based consumer identification
• Integration with external token issuers (your own auth server, Auth0, etc.)

Consumer Credential Reference