RequestAuthentication.spec.jwtRules

The list of JWT [audiences](https://tools.ietf.org/html/rfc7519#section-4.1.3) that are allowed to access.

If set to true, the original token will be kept for the upstream request.

List of cookie names from which JWT is expected.

List of header locations from which JWT is expected.

List of query parameters from which JWT is expected.

Identifies the issuer that issued the JWT.

• minLength: 1

JSON Web Key Set of public keys to validate signature of the JWT.

URL of the provider's public key set to validate signature of the JWT.

• minLength: 1
• maxLength: 2048
• x-kubernetes-validations: [{"message":"url must have scheme http:// or https://","rule":"url(self).getScheme() in [\"http\", \"https\"]"}]

URL of the provider's public key set to validate signature of the JWT.

• minLength: 1
• maxLength: 2048
• x-kubernetes-validations: [{"message":"url must have scheme http:// or https://","rule":"url(self).getScheme() in [\"http\", \"https\"]"}]

This field specifies a list of operations to copy the claim to HTTP headers on a successfully verified token.

This field specifies the header name to output a successfully verified JWT payload to the backend.

List of JWT claim names that should be treated as space-delimited strings.

• maxItems: 64

The maximum amount of time that the resolver, determined by the PILOT_JWT_ENABLE_REMOTE_JWKS environment variable, will spend waiting for the JWKS to be fetched.

• x-kubernetes-validations: [{"message":"must be a valid duration greater than 1ms","rule":"duration(self) \u003e= duration('1ms')"}]