API Shield JWT Validation

What is the name of the domain?

dealer.cftestapp.com

What is the issue you’re encountering

I have a basic dummy website for a demo and Im having trouble getting a basic JWT rule working in the interface. I can send valid requests that return 200 codes using the JWT to the api, but the basic is_signed JWT rule is logging every JWT request and not just non-compliant ones.

What steps have you taken to resolve the issue?

Verified signature matches token, used node-red to verify valid request returns 200 and non-valid token returns error, validated uploaded JWT key generates matching signature to token.

What are the steps to reproduce the issue?

reate basic rule with (is_jwt_valid(“xxxx”)) where the token is located in the header
Header:authorization, set token is missing to mark as non complaint, set action to log.

Screenshot of the error

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.