Merge pull request #108 from bcgov/dev

kong upstream jwt plugin defaults (#107)
bcgov · Nov 9, 2023 · 577bae6 · 577bae6
2 parents 82fa53d + 73f88a9
commit 577bae6
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/microservices/gatewayApi/entrypoint.sh b/microservices/gatewayApi/entrypoint.sh
@@ -45,6 +45,12 @@ cat > "${CONFIG_PATH:-./config/default.json}" <<EOF
             "redis_password": "${PLUGINS_RATELIMITING_REDIS_PASSWORD}",
             "redis_timeout": 2000
         },
+        "upstream_jwt": {
+            "key_id": "${PLUGINS_UPSTREAM_JWT_KEY_ID}",
+            "issuer": "${PLUGINS_UPSTREAM_JWT_ISSUER}",
+            "private_key_location": "${PLUGINS_UPSTREAM_JWT_PRIVATE_KEY_FILE}",
+            "public_key_location": "${PLUGINS_UPSTREAM_JWT_PUBLIC_KEY_FILE}"
+        },
         "proxy_cache": {
             "strategy": "memory",
             "memory": { "dictionary_name": "${PLUGINS_PROXYCACHE_MEMORY_DICT:-"aps_proxy_cache"}" }

diff --git a/microservices/gatewayApi/utils/transforms.py b/microservices/gatewayApi/utils/transforms.py
@@ -21,6 +21,19 @@ def proxy_cache (plugin, plugin_configs=None):
     for k, v in override_config.items():
         plugin_config[k] = v
 
+def upstream_jwt (plugin, plugin_configs=None):
+    override_config = conf['plugins']['upstream_jwt']
+
+    if 'config' in plugin:
+        plugin_config = plugin['config']
+    else:
+        plugin['config'] = {}
+        plugin_config = plugin['config']
+
+    for k, v in override_config.items():
+        plugin_config[k] = v
+
+
 def rate_limiting (plugin, plugin_configs=None):
     override_config = conf['plugins']['rate_limiting']
 
@@ -77,6 +90,8 @@ def traverse_plugins (yaml, plugin_configs = None):
                         rate_limiting(item, plugin_configs)
                     elif item['name'] == 'proxy-cache':
                         proxy_cache(item, plugin_configs)
+                    elif item['name'] == 'kong-upstream-jwt':
+                        upstream_jwt(item, plugin_configs)
                 traverse_plugins (item, plugin_configs)