0

Background of the issue: The project has microservice architecture and using APISIX as API gateway. APISIX jwt-auth plugin is used for user authentication from gateway side. Recently we stared using google identity platform for user management and authentication so the jwt tokens will be created by google and we need to verify the token using their public keys published in the url. As per the google documentation we need to refresh the public key after certain amount of time.

When coming to the apisix part there is no option for refreshing the public key dynamically also there is no option to save multiple public keys in jwt-auth plugin.

Please let me know how we can achieve this scenario.

Rahul Reghunath
  • 1,210
  • 13
  • 23
  • Can you please try with the Firebase authentication method mentioned in [document](https://cloud.google.com/api-gateway/docs/authenticating-users-firebase)? As discussed in https://stackoverflow.com/questions/72046737/user-authentication-for-identity-platform-api-gateway – Vaidehi Jamankar Nov 16 '22 at 06:08

0 Answers0