mirror of
https://github.com/seaweedfs/seaweedfs.git
synced 2025-11-24 08:46:54 +08:00
Updated Filer JWT Use (markdown)
@@ -1,3 +1,7 @@
|
||||
## Introduction
|
||||
|
||||
See [the security overview](https://github.com/seaweedfs/seaweedfs/wiki/Security-Overview#securing-filer-http-with-jwt) for a more complete description.
|
||||
|
||||
## How to get a valid JWT
|
||||
|
||||
The Filer won't generate JWTs, you will have to configure another service to create a JWT with the same signing key set in the `security.toml` file described on the Security Configuration wiki page. When generating the JWT, ensure that the timeout in seconds matches the timeout set in the `security.toml` file.
|
||||
@@ -9,3 +13,5 @@ The Filer supports receiving a JWT in three different forms:
|
||||
1. Through the `Authorization: Bearer <token>` header
|
||||
2. Via the request's query parameters: http://localhost:8888/buckets/all?jwt=token
|
||||
3. In an HTTP-only cookie named AT(Access Token)
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user