smolnar82 commented on PR #1060:
URL: https://github.com/apache/knox/pull/1060#issuecomment-3083608144

   I tested this change locally:
   - generated a token (I configured audience to `proxy-token` on the 
`homepage` topology)
   - added a new topology called `health` with `JWTProvider` federation filter 
(with expected audience of `proxy-token`)
   - verified the generated token:
   
   ```
   smolnar$ curl -iku Token:$MY_JWT 
https://localhost:8443/gateway/health/v1/gateway-status
   HTTP/1.1 200 OK
   Date: Thu, 17 Jul 2025 10:56:45 GMT
   Cache-Control: must-revalidate,no-cache,no-store
   Content-Type: text/plain;charset=iso-8859-1
   Content-Length: 3
   
   OK
   ```
   
   Logs:
   ```
   2025-07-17 12:56:45,924 faf87bf4-b0d9-4bf7-b1e0-36385a6e641e INFO  
federation.jwt (AbstractJWTFilter.java:verifyTokenSignature(584)) - Token 
verification result using knox signing cert, verified: true
   2025-07-17 12:56:45,949 faf87bf4-b0d9-4bf7-b1e0-36385a6e641e INFO  
knox.gateway (GatewayStatusService.java:status(50)) - Checking gateway status. 
Deployed topologies: [metadata, manager, knoxsso, sandbox, admin, health, 
homepage]. Waiting for: []
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@knox.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to