Skip to content

Conversation

Moshyfawn
Copy link
Contributor

This PR adds an input field to the JWT Auth plugin for additional JWT headers, enabling support for APIs like App Store Connect that require custom header fields.

Potential improvements for consideration:

  • Pre-populate the alg field with the selected algorithm
  • Auto-fill iat and exp headers with current timestamp and configurable token lifetime

Happy to discuss and update this PR further!

yaak-jwt-auth-headers

@Moshyfawn Moshyfawn marked this pull request as ready for review August 11, 2025 19:51
Copy link
Member

@gschier gschier left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great improvement! I dislike having a raw JSON field for headers but that's the best option provided the current plugin APIs.

I'm going to extend the APIs to add a key/value input type so that headers it can be used here, before merging.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants