Mercurial > hg > nginx-site

annotate xml/ru/docs/http/ngx_http_auth_jwt_module.xml @ 2835:b64410025027

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Updated docs for the upcoming NGINX Plus release.
author Yaroslav Zhuravlev <yar@nginx.com>
date Sun, 13 Feb 2022 17:17:07 +0000
parents 4add6ae1296f
children 8bd6f772005f
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
1 <?xml version="1.0"?>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
2
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
3 <!--
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
4 Copyright (C) Nginx, Inc.
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
5 -->
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
6
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
7 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
8
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
9 <module name="Модуль ngx_http_auth_jwt_module"
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
10 link="/ru/docs/http/ngx_http_auth_jwt_module.html"
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
11 lang="ru"
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
12 rev="12">
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
13
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
14 <section id="summary">
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
15
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
16 <para>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
17 Модуль <literal>ngx_http_auth_jwt_module</literal> (1.11.3)
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
18 предоставляет возможность авторизации клиента с проверкой предоставляемого
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
19 <link url="https://datatracker.ietf.org/doc/html/rfc7519">JSON Web Token</link> (JWT)
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
20 при помощи указанных ключей.
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
21 Модуль поддерживает
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
22 <link url="https://datatracker.ietf.org/doc/html/rfc7515">JSON Web Signature</link> (JWS),
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
23 <link url="https://datatracker.ietf.org/doc/html/rfc7516">JSON Web Encryption</link> (JWE)
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
24 (1.19.7) и Nested JWT (1.21.0).
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
25 Модуль может использоваться для настройки аутентификации
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
26 <link url="http://openid.net/specs/openid-connect-core-1_0.html">OpenID Connect</link>.
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
27 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
28
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
29 <para>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
30 Модуль может быть скомбинирован с
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
31 другими модулями доступа, такими как
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
32 <link doc="ngx_http_access_module.xml">ngx_http_access_module</link>,
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
33 <link doc="ngx_http_auth_basic_module.xml">ngx_http_auth_basic_module</link>
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
34 и
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
35 <link doc="ngx_http_auth_request_module.xml">ngx_http_auth_request_module</link>
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
36 с помощью директивы <link doc="ngx_http_core_module.xml" id="satisfy"/>.
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
37 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
38
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
39 <para>
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
40 <note>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
41 Модуль доступен как часть
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
42 <commercial_version>коммерческой подписки</commercial_version>.
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
43 </note>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
44 </para>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
45
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
46 </section>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
47
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
48
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
49 <section id="algorithms" name="Поддерживаемые алгоритмы">
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
50
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
51 <para>
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
52 Модуль поддерживает следующие криптографические
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
53 <link url="https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms">алгоритмы</link>.
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
54 </para>
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
55
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
56 <para>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
57 Алгоритмы JWS:
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
58 <list type="bullet">
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
59
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
60 <listitem>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
61 HS256, HS384, HS512
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
62 </listitem>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
63
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
64 <listitem>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
65 RS256, RS384, RS512
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
66 </listitem>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
67
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
68 <listitem>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
69 ES256, ES384, ES512
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
70 </listitem>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
71
2304
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
72 <listitem>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
73 EdDSA (подписи Ed25519 и Ed448) (1.15.7)
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
74 </listitem>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
75
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
76 </list>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
77
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
78 <note>
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
79 До версии 1.13.7
2163
ca35862f1630 Corrected typo in auth_jwt module.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2143
diff changeset
80 поддерживались только алгоритмы HS256, RS256 и ES256.
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
81 </note>
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
82 </para>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
83
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
84 <para>
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
85 Алгоритмы JWE для шифрования содержимого (1.19.7):
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
86 <list type="bullet">
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
87
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
88 <listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
89 A128CBC-HS256, A192CBC-HS384, A256CBC-HS512
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
90 </listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
91
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
92 <listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
93 A128GCM, A192GCM, A256GCM
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
94 </listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
95
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
96 </list>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
97 </para>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
98
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
99 <para>
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
100 Алгоритмы JWE для управления ключом (1.19.9):
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
101 <list type="bullet">
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
102
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
103 <listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
104 A128KW, A192KW, A256KW
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
105 </listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
106
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
107 <listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
108 A128GCMKW, A192GCMKW, A256GCMKW
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
109 </listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
110
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
111 <listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
112 dir&mdash;прямое использование симметричного ключа
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
113 в качестве ключа шифрования содержимого
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
114 </listitem>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
115
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
116 <listitem>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
117 RSA-OAEP, RSA-OAEP-256, RSA-OAEP-384, RSA-OAEP-512 (1.21.0)
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
118 </listitem>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
119
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
120 </list>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
121 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
122
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
123 </section>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
124
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
125
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
126 <section id="example" name="Пример конфигурации">
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
127
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
128 <para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
129 <example>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
130 location / {
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
131 auth_jwt "closed site";
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
132 auth_jwt_key_file conf/keys.json;
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
133 }
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
134 </example>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
135 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
136
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
137 </section>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
138
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
139
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
140 <section id="directives" name="Директивы">
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
141
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
142 <directive name="auth_jwt">
1831
b5e416ace4bf Corrected style and variables description in auth_jwt.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1763
diff changeset
143 <syntax>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
144 <value>строка</value>
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
145 [<literal>token=</literal><value>$переменная</value>] |
1831
b5e416ace4bf Corrected style and variables description in auth_jwt.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1763
diff changeset
146 <literal>off</literal></syntax>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
147 <default>off</default>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
148 <context>http</context>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
149 <context>server</context>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
150 <context>location</context>
2139
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
151 <context>limit_except</context>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
152
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
153 <para>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
154 Включает проверку JSON Web Token.
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
155 Заданная <value>строка</value> используется в качестве <literal>realm</literal>.
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
156 В значении параметра допустимо использование переменных.
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
157 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
158
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
159 <para>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
160 Необязательный параметр <literal>token</literal> задаёт переменную,
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
161 содержащую JSON Web Token.
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
162 По умолчанию JWT передаётся в заголовке <header>Authorization</header>
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
163 в качестве
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
164 <link url="https://datatracker.ietf.org/doc/html/rfc6750">Bearer Token</link>.
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
165 JWT может также передаваться как кука или часть строки запроса:
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
166 <example>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
167 auth_jwt "closed site" token=$cookie_auth_token;
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
168 </example>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
169 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
170
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
171 <para>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
172 Специальное значение <literal>off</literal> отменяет действие
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
173 унаследованной с предыдущего уровня конфигурации
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
174 директивы <literal>auth_jwt</literal>.
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
175 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
176
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
177 </directive>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
178
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
179
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
180 <directive name="auth_jwt_claim_set">
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
181 <syntax><value>$переменная</value> <value>имя</value> ...</syntax>
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
182 <default/>
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
183 <context>http</context>
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
184 <appeared-in>1.11.10</appeared-in>
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
185
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
186 <para>
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
187 Устанавливает <value>переменную</value> в параметр JWT claim,
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
188 определяемый именами ключей.
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
189 Сопоставление имён начинается с верхнего уровня дерева JSON.
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
190 Для массива переменная хранит список его элементов, разделяемых запятыми.
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
191 <example>
2424
dd3ac7eefeed Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2408
diff changeset
192 auth_jwt_claim_set $email info e-mail;
dd3ac7eefeed Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2408
diff changeset
193 auth_jwt_claim_set $job info "job title";
2082
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
194 </example>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
195 <note>
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
196 До версии 1.13.7 можно было указать лишь одно имя,
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
197 результат для массивов был не определён.
fee7627f6a5a Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1925
diff changeset
198 </note>
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
199 </para>
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
200
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
201 <para>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
202 <note>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
203 Значения переменных для tokens, зашифрованных при помощи JWE,
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
204 доступны только после дешифрования, которое происходит в
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
205 <link doc="../dev/development_guide.xml" id="http_phases">Access</link>-фазе.
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
206 </note>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
207 </para>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
208
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
209 </directive>
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
210
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
211
2142
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
212 <directive name="auth_jwt_header_set">
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
213 <syntax><value>$переменная</value> <value>имя</value> ...</syntax>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
214 <default/>
2139
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
215 <context>http</context>
2142
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
216 <appeared-in>1.11.10</appeared-in>
2139
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
217
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
218 <para>
2142
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
219 Устанавливает <value>переменную</value> в параметр заголовка JOSE,
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
220 определяемый именами ключей.
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
221 Сопоставление имён начинается с верхнего уровня дерева JSON.
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
222 Для массива переменная хранит список его элементов, разделяемых запятыми.
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
223 <note>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
224 До версии 1.13.7 можно было указать лишь одно имя,
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
225 результат для массивов был не определён.
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
226 </note>
2139
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
227 </para>
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
228
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
229 </directive>
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
230
2835
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
231 <directive name="auth_jwt_key_cache">
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
232 <syntax><value> время</value></syntax>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
233 <default>0</default>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
234 <context>http</context>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
235 <context>server</context>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
236 <context>location</context>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
237 <appeared-in>1.21.4</appeared-in>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
238
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
239 <para>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
240 Разрешает или запрещает кэширование ключей,
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
241 полученных из <link id="auth_jwt_key_file">файла</link> или из
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
242 <link id="auth_jwt_key_request">подзапроса</link>,
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
243 и задаёт время их кэширования.
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
244 Кэширование ключей, полученных из переменных, не поддерживается.
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
245 По умолчанию кэширование ключей выключено.
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
246 </para>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
247
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
248 </directive>
b64410025027 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2831
diff changeset
249
2139
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
250
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
251 <directive name="auth_jwt_key_file">
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
252 <syntax><value>файл</value></syntax>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
253 <default/>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
254 <context>http</context>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
255 <context>server</context>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
256 <context>location</context>
2139
f6e578b1b02d Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2086
diff changeset
257 <context>limit_except</context>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
258
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
259 <para>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
260 Задаёт <value>файл</value> в формате
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
261 <link url="https://datatracker.ietf.org/doc/html/rfc7517#section-5">JSON Web Key Set</link>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
262 для проверки подписи JWT.
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
263 В значении параметра допустимо использование переменных.
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
264 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
265
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
266 <para>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
267 На одном уровне может быть указано
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
268 несколько директив <literal>auth_jwt_key_file</literal> (1.21.1):
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
269 <example>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
270 auth_jwt_key_file conf/keys.json;
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
271 auth_jwt_key_file conf/key.jwk;
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
272 </example>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
273 Если хотя бы один из указанных ключей не может быть загружен или обработан,
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
274 nginx вернёт ошибку
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
275 <http-status code="500" text="Internal Server Error"/>.
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
276 </para>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
277
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
278 </directive>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
279
2142
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
280
2304
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
281 <directive name="auth_jwt_key_request">
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
282 <syntax><value>uri</value></syntax>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
283 <default/>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
284 <context>http</context>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
285 <context>server</context>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
286 <context>location</context>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
287 <context>limit_except</context>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
288 <appeared-in>1.15.6</appeared-in>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
289
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
290 <para>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
291 Позволяет получать файл в формате
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
292 <link url="https://datatracker.ietf.org/doc/html/rfc7517#section-5">JSON Web Key Set</link>
2304
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
293 из подзапроса для проверки подписи JWT и
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
294 задаёт URI, на который будет отправлен подзапрос.
2694
1f2bd0d9a06c Documented variables support for auth_jwt_key_request.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2424
diff changeset
295 В значении параметра допустимо использование переменных.
2304
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
296 Для предотвращения дополнительных затрат на проверку
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
297 файл рекомендутеся кэшировать.
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
298 <example>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
299 proxy_cache_path /data/nginx/cache levels=1 keys_zone=foo:10m;
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
300
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
301 server {
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
302 ...
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
303
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
304 location / {
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
305 auth_jwt "closed site";
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
306 auth_jwt_key_request /jwks_uri;
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
307 }
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
308
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
309 location = /jwks_uri {
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
310 internal;
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
311 proxy_cache foo;
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
312 proxy_pass http://idp.example.com/keys;
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
313 }
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
314 }
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
315 </example>
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
316 На одном уровне может быть указано
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
317 несколько директив <literal>auth_jwt_key_request</literal> (1.21.1):
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
318 <example>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
319 auth_jwt_key_request /jwks_uri;
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
320 auth_jwt_key_request /jwks2_uri;
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
321 </example>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
322 Если хотя бы один из указанных ключей не может быть загружен или обработан,
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
323 nginx вернёт ошибку
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
324 <http-status code="500" text="Internal Server Error"/>.
2304
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
325 </para>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
326
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
327 </directive>
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
328
f4b9660316c5 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 2163
diff changeset
329
2142
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
330 <directive name="auth_jwt_leeway">
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
331 <syntax><value>время</value></syntax>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
332 <default>0s</default>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
333 <context>http</context>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
334 <context>server</context>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
335 <context>location</context>
2143
231cad90a823 Corrected appeared-in version for the auth_jwt_leeway directive.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2142
diff changeset
336 <appeared-in>1.13.10</appeared-in>
2142
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
337
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
338 <para>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
339 Задаёт максимально допустимое отклонение времени для компенсации
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
340 расхождения часов при проверке JWT claims
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
341 <link url="https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.4">exp</link>
2142
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
342 и
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
343 <link url="https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.5">nbf</link>.
2142
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
344 </para>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
345
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
346 </directive>
ca7568f67dee Sorted directives alphabetically.
Ruslan Ermilov <ru@nginx.com>
parents: 2139
diff changeset
347
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
348
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
349 <directive name="auth_jwt_type">
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
350 <syntax><value>signed</value> |
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
351 <value>encrypted</value> |
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
352 <value>nested</value></syntax>
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
353 <default>signed</default>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
354 <context>http</context>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
355 <context>server</context>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
356 <context>location</context>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
357 <context>limit_except</context>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
358 <appeared-in>1.19.7</appeared-in>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
359
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
360 <para>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
361 Задаёт ожидаемый тип JSON Web Token:
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
362 JWS (<literal>signed</literal>),
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
363 JWE (<literal>encrypted</literal>)
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
364 или подписанный и затем зашифрованный
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
365 Nested JWT (<literal>nested</literal>) (1.21.0).
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
366 </para>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
367
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
368 </directive>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
369
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
370
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
371 <directive name="auth_jwt_require">
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
372 <syntax><value>значение</value> ...</syntax>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
373 <default/>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
374 <context>http</context>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
375 <context>server</context>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
376 <context>location</context>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
377 <context>limit_except</context>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
378 <appeared-in>1.21.2</appeared-in>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
379
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
380 <para>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
381 Задаёт дополнительные условия для проверки JWT.
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
382 В качестве значения можно использовать текст, переменные и их комбинации.
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
383 Для успешной аутентификации необходимо, чтобы
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
384 значение всех строковых параметров было непустое или не равно “0”.
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
385 <example>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
386 map $jwt_claim_iss $valid_jwt_iss {
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
387 "good" 1;
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
388 }
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
389 ...
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
390
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
391 auth_jwt_require $valid_jwt_iss;
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
392 </example>
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
393 </para>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
394
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
395 </directive>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
396
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
397 </section>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
398
1831
b5e416ace4bf Corrected style and variables description in auth_jwt.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1763
diff changeset
399
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
400 <section id="variables" name="Встроенные переменные">
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
401
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
402 <para>
1832
c30d3557ec68 Translated the JWT module into Russian.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1831
diff changeset
403 Модуль <literal>ngx_http_auth_jwt_module</literal>
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
404 поддерживает встроенные переменные:
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
405 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
406
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
407 <para>
1831
b5e416ace4bf Corrected style and variables description in auth_jwt.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 1763
diff changeset
408 <list type="tag" compact="yes">
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
409 <tag-name id="var_jwt_header_"><var>$jwt_header_</var><value>имя</value></tag-name>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
410 <tag-desc>
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
411 возвращает значение указанного
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
412 <link url="https://datatracker.ietf.org/doc/html/rfc7515#section-4">заголовка JOSE</link>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
413 </tag-desc>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
414
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
415 <tag-name id="var_jwt_claim_"><var>$jwt_claim_</var><value>имя</value></tag-name>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
416 <tag-desc>
1925
a58b35cc0823 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents: 1832
diff changeset
417 возвращает значение указанной
2831
4add6ae1296f Updated links to datatracker.ietf.org.
Sergey Kandaurov <pluknet@nginx.com>
parents: 2768
diff changeset
418 <link url="https://datatracker.ietf.org/doc/html/rfc7519#section-4">JWT claim</link>
2408
183c16ce60d0 Added info about nested claims and claims with a dot to $jwt_claim_name.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2304
diff changeset
419
183c16ce60d0 Added info about nested claims and claims with a dot to $jwt_claim_name.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2304
diff changeset
420 <para>
183c16ce60d0 Added info about nested claims and claims with a dot to $jwt_claim_name.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2304
diff changeset
421 Для вложенных claim, а также claim, содержащих точку (“.”),
183c16ce60d0 Added info about nested claims and claims with a dot to $jwt_claim_name.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2304
diff changeset
422 значение переменной вычислить невозможно,
183c16ce60d0 Added info about nested claims and claims with a dot to $jwt_claim_name.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2304
diff changeset
423 следует использовать директиву <link id="auth_jwt_claim_set"/>.
183c16ce60d0 Added info about nested claims and claims with a dot to $jwt_claim_name.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2304
diff changeset
424 </para>
2713
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
425
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
426 <para>
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
427 Значения переменных для tokens, зашифрованных при помощи JWE,
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
428 доступны только после дешифрования, которое происходит в
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
429 <link doc="../dev/development_guide.xml" id="http_phases">Access</link>-фазе.
efb3d27dfa23 Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2694
diff changeset
430 </para>
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
431 </tag-desc>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
432
2768
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
433 <tag-name id="var_jwt_payload"><var>$jwt_payload</var></tag-name>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
434 <tag-desc>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
435 возвращает расшифрованную полезную нагрузку (payload) верхнего уровня
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
436 для <literal>вложенных</literal>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
437 или <literal>зашифрованных</literal> токенов (1.21.2).
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
438 Для вложенных токенов возвращает внутренний JWS токен.
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
439 Для зашифрованных токенов возвращает JSON с claims.
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
440 </tag-desc>
9dd8c203a54a Updated docs for the upcoming NGINX Plus release.
Yaroslav Zhuravlev <yar@nginx.com>
parents: 2713
diff changeset
441
1763
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
442 </list>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
443 </para>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
444
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
445 </section>
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
446
a7974b8d2a23 Updated docs for the upcoming NGINX Plus release.
Ruslan Ermilov <ru@nginx.com>
parents:
diff changeset
447 </module>