A Dropwizard authentication filter using JSON Web Token (JWT).
JSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS).
Check out http://jwt.io/
To use this library in your project you can download it from Maven Central.
<dependency>
<groupId>com.github.toastshaman</groupId>
<artifactId>dropwizard-auth-jwt</artifactId>
<version>1.1.2-0</version>
</dependency>See this code example if you want to use this code your dropwizard application. Once you have started the example application here are some sample requests to generate a valid and an expired token:
curl -X GET -H "Cache-Control: no-cache" 'http://localhost:8080/jwt/generate-valid-token'or you can create an invalid token instead to see a failure case with:
curl -X GET -H "Cache-Control: no-cache" 'http://localhost:8080/jwt/generate-expired-token'Once you have a token, you can send it to the following endpoint to get some information about the logged in user:
curl -X GET \
-H "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJpYXQiOjE0NDkzMTQwOTUsInN1YiI6Imdvb2QtZ3V5In0.oFXdelQECJrw6_e4gR1HU3ljFvY8zmf2EHDsBnnea7n2UDBipmNDbx3bw-Bzzq-FwtEO6qzageK2jbJxM6JHbQ" \
-H "Cache-Control: no-cache" 'http://localhost:8080/jwt/check-token'Apache License Version 2.0
http://apache.org/licenses/LICENSE-2.0.txt
A special thanks goes to MartinSahlen for providing a Gist with the Dropwizard 8 implementation of the AuthFactory.
A special thanks goes to Kimble for adding cookie support.
A special thanks goes to alexitooi for adding support for the CachingAuthenticator.