Skip to content

Commit

Permalink
chore: address PR feedback
Browse files Browse the repository at this point in the history
  • Loading branch information
markphelps committed Jan 10, 2024
1 parent cfc7b48 commit 003680a
Show file tree
Hide file tree
Showing 3 changed files with 5 additions and 5 deletions.
2 changes: 1 addition & 1 deletion authentication/methods.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -270,7 +270,7 @@ The expiration can be used to schedule when to next request a new client token.

[JSON Web Tokens](https://jwt.io/) (JWT) are an open, industry standard RFC 7519 method for representing claims securely between two parties. Flipt supports the use of externally created and signed JWTs as a method of authentication.

JWT authentication is useful for scenarios where you want to integrate Flipt with an existing authentication system.
JWT authentication is useful for scenarios where you want to integrate Flipt with an existing authentication system, or where you want to perform service to Flipt authentication without the need to manage static client tokens.

<Note>
JWT authentication is **not** supported by the Flipt UI as it is not a session compatible authentication method.
Expand Down
2 changes: 1 addition & 1 deletion authentication/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ Once a `client token` has been acquired, it can be supplied via request metadata

## JSON Web Tokens

Flipt can also authenticate requests using externally created and signed [JSON Web Tokens](https://jwt.io/). This is useful for integrating with existing authentication systems with Flipt.
Flipt can also authenticate requests using externally created and signed [JSON Web Tokens](https://jwt.io/). This is useful for integrating existing authentication systems with Flipt.

To enable JWT authentication, you will need to configure Flipt with the public key used to verify the JWT signature.

Expand Down
6 changes: 3 additions & 3 deletions configuration/authentication.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -340,17 +340,17 @@ Further explanation for using this method can be found in the [Authentication: K

### JSON Web Token

The `jwt` method provides the ability to authenticate with Flipt using an externally issued JSON Web Token. This method is useful for integrating with other authentication systems that can issue JWTs (e.g. [Auth0](https://auth0.com/docs/tokens/json-web-tokens)).
The `jwt` method provides the ability to authenticate with Flipt using an externally issued JSON Web Token. This method is useful for integrating with other authentication systems that can issue JWTs (e.g. [Auth0](https://auth0.com/docs/tokens/json-web-tokens)) or by generating your own signed JWTs on the fly.

Flipt supports asymmetrically signed JWTs using the following algorithm:
Flipt supports asymmetrically signed JWTs using the following algorithms:

- RS256
- RS512
- ES256
- ES512
- EdDSA

This means that the JWT must be signed using an RSA private key and Flipt must be configured with the corresponding public key.
This means that the JWT must be signed using a private key leveraging one of these algorithms and Flipt must be configured with the corresponding public key.

Flipt supports key verification using the following methods:

Expand Down

0 comments on commit 003680a

Please sign in to comment.