Validating JWT token in WSO2 API gateway

2
votes

A 3rd party client application would be generating a JWT token. The JWT is generated without any WSO2 dependancy.

The JWT token will then be passed on to a WSO2 API gateway. I want to validate the JWT token on WSO2 API gateway. I suppose, I would need the certificate to validate the token.

Can you please point me to a reference or provide the instructions on how to go about it ? Do I need to write custom code and do some configuration in api-manager.xml ?

1
wso2wso2iswso2-am

1 Answers

3
votes

Yes, you need to write a custom handler for this. You can refer this documentation.

If you want to integrate this handler to all new APIs you create, you can set your handle to API template in repository/resources/api_templates/velocity_template.xml.