recommend users to use access_by_lua_block instead of content_by_lua_block

Author: wpjunior

.memory_leak/test/teste.t

@@ -12,10 +12,10 @@ __DATA__
         content_by_lua_block {
             local libjwt = require("resty.libjwt")
             local cjson = require("cjson.safe")
-            local claim, err = libjwt.validate({
-                ["jwks_files"] = {"/usr/share/tokens/jwks.json"},
+            local token, err = libjwt.validate({
+                jwks_files = {"/usr/share/tokens/jwks.json"},
             })
-            if claim then
+            if token then
                 ngx.status = ngx.HTTP_OK
                 local response = {
                     message = "ok"

README.md

@@ -78,22 +78,19 @@ Here is an example of how to configure **libjwt** in `nginx.conf`:
 server {
     listen 80;
     location /private {
-        content_by_lua_block {
+        access_by_lua_block {
             local libjwt = require("resty.libjwt")
-            local cjson = require("cjson.safe")
-            local claim, err = libjwt.validate({
+            local token, err = libjwt.validate({
                 jwks_files = {"/usr/share/tokens/jwks.json"}
             })
-            if claim then
-                local claim_str = cjson.encode(claim) or "Invalid Claim"
-                ngx.log(ngx.ERR, "JWT Claims: " .. claim_str)
-                ngx.status = ngx.HTTP_OK
-                return ngx.say(claim_str)
+            if token then
+                -- You may add logic as needed, accessing the JWT claims:
+                -- token.claim.sub
+                -- token.claim.iss
             end
-            ngx.status = ngx.HTTP_UNAUTHORIZED
-            local response = { message = "Unauthorized" }
-            return ngx.say(cjson.encode(response))
         }
+
+        proxy_pass http://your_backend;
     }
 }
 

e2e/nginx/nginx.private.jwks.conf

@@ -18,8 +18,8 @@ http {
             content_by_lua_block {
                 local libjwt = require("resty.libjwt")
                 local cjson = require("cjson.safe")
-                local claim, err = libjwt.validate({
-                    ["jwks_files"] = {"/usr/share/tokens/jwks.json"},
+                local token, err = libjwt.validate({
+                    jwks_files = {"/usr/share/tokens/jwks.json"},
                 })
                 ngx.header.content_type = "application/json"
                 if err and err ~= "" then
@@ -29,9 +29,9 @@ http {
                     }
                     return ngx.say(cjson.encode(response))
                 end
-                if claim then
-                    local claim_str = cjson.encode(claim) or "Invalid Claim"
-                    ngx.log(ngx.ERR, "JWT Claims: " .. claim_str)
+                if token then
+                    local claim_str = cjson.encode(token.claim) or "Invalid token"
+                    ngx.log(ngx.ERR, "Token Claims: " .. claim_str)
                     ngx.status = ngx.HTTP_OK
                     return ngx.say(claim_str)
                 end

e2e/nginx/replace.go

@@ -14,7 +14,7 @@ func ReplaceNginxConfig(pathFile string, newPaths []string) (file []byte, err er
 		return nil, err
 	}
 	config := string(content)
-	re := regexp.MustCompile(`\["jwks_files"\]\s*=\s*\{[^}]*\}`)
+	re := regexp.MustCompile(`jwks_files\s*=\s*\{[^}]*\}`)
 	newValue := fmt.Sprintf(`["jwks_files"] = {%s}`, strings.Join(newPaths, `, `))
 	modifiedConfig := re.ReplaceAllString(config, newValue)
 	return []byte(modifiedConfig), nil

nginx.conf

@@ -15,14 +15,14 @@ http {
         }
 
         location /private {
-            content_by_lua_block {
+            access_by_lua_block {
                 local libjwt = require("resty.libjwt")
                 local cjson = require("cjson.safe")
-                local claim, err = libjwt.validate({
+                local token, err = libjwt.validate({
                     ["jwks_files"] = {"/usr/share/tokens/jwks.json"},
                 })
-                if claim then
-                    local claim_str = cjson.encode(claim) or "Invalid Claim"
+                if token then
+                    local claim_str = cjson.encode(claim) or "Invalid Token"
                     ngx.status = ngx.HTTP_OK
                     return ngx.say(claim_str)
                 end