Session manager that encodes the backend session id as a signed JWT instead of storing a mapping. The JWT is verified and its subject read back on every request except a login, which is authenticated with credentials instead.
Syntax
jwtSessionManager: audience: <string> jwk:{}
jwtSessionManager:
audience: <string>
jwk: {}
Attributes
Name
Required
Default
Description
Examples
audience
false
-
Value written into the aud claim of the session JWT and expected when it is read back.
RSA key used to sign and verify the session JWT. When it resolves to nothing, a key is generated at startup, which invalidates every session on restart.
