how to add header; for example add user name by decoding jwt token

[skrrepo]

how to add header. for example user name by decoding jwt header

[max-lt]

You can add header with the add_header directive

server {
  // ...

  location = /your-locationq {
    add_header X-JWT-ID $jwt_claim_id always;
    // ...
  }
}

[skrrepo]

Hi,
Thank you for reply.

I tried adding below to /etc/nginx/nginx.conf but i did not see it on the response headers
server {
listen 80 default_server;
listen [::]:80 default_server;
root /var/www/html;
index index.html index.htm index.nginx-debian.html;
server_name _;
location / {
add_header X-JWT-SUB $jwt_claim_sub always;
root /usr/share/nginx/html;
index index.html index.htm;
}
}

[max-lt]

Did you enabled and configured the jwt module ? see https://github.com/max-lt/nginx-jwt-module#example-configuration

[skrrepo]

the module is loaded in nginx.conf
load_module modules/ngx_http_auth_jwt_module.so;

Below is the complete conf.. please let me know if i am missing anything

load_module modules/ngx_http_auth_jwt_module.so;                                                                                                                                                    
                                                                                                                                                                                                    
user  nginx;                                                                                                                                                                                        
worker_processes  auto;                                                                                                                                                                             
                                                                                                                                                                                                    
error_log  /var/log/nginx/error.log notice;                                                                                                                                                         
pid        /var/run/nginx.pid;                                                                                                                                                                      
                                                                                                                                                                                                    
                                                                                                                                                                                                    
events {                                                                                                                                                                                            
    worker_connections  1024;                                                                                                                                                                       
}                                                                                                                                                                                                   
                                                                                                                                                                                                    
                                                                                                                                                                                                    
http {                                                                                                                                                                                              
    include       /etc/nginx/mime.types;                                                                                                                                                            
    default_type  application/octet-stream;                                                                                                                                                         
                                                                                                                                                                                                    
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '                                                                                                                       
                      '$status $body_bytes_sent "$http_referer" '                                                                                                                                   
                      '"$http_user_agent" "$http_x_forwarded_for"';                                                                                                                                 
                                                                                                                                                                                                    
    access_log  /var/log/nginx/access.log  main;                                                                                                                                                    
                                                                                                                                                                                                    
    sendfile        on;                                                                                                                                                                             
    #tcp_nopush     on;                                                                                                                                                                             
                                                                                                                                                                                                    
    keepalive_timeout  65;                                                                                                                                                                          
                                                                                                                                                                                                    
    #gzip  on;                                                                                                                                                                                      
                                                                                                                                                                                                    
    include /etc/nginx/conf.d/*.conf;                                                                                                                                                               
        server {                                                                                                                                                                                    
        listen 80 default_server;                                                                                                                                                                   
        listen [::]:80 default_server;                                                                                                                                                              
        root /var/www/html;                                                                                                                                                                         
        index index.html index.htm index.nginx-debian.html;                                                                                                                                         
        server_name _;                                                                                                                                                                              
        location / {                                                                                                                                                                                
                add_header X-JWT-SUB $jwt_claim_sub always;                                                                                                                                         
                root /usr/share/nginx/html;                                                                                                                                                         
                index index.html index.htm;                                                                                                                                                         
        }                                                                                                                                                                                           
    }                                                                                                                                                                                               
} 

[max-lt]

Ok, so if the module is loaded you still have to configure it with auth_jwt_key and auth_jwt directives. See https://github.com/max-lt/nginx-jwt-module#example-configuration.

Note that jwt related variables won't be set if auth_jwt is set to off

[skrrepo]

I want to decode the incoming bearer token but not try to authorize. How would i do this?

[max-lt]

You can't, but as long as you don't use auth_jwt_require this module is more about authentication than authorization