HelidonHelidon4.5.2

io.helidon.security.providers.jwt.JwtProvider

Description

JWT authentication provider

Configuration options

KeyTypeDefaultDescription
allow-impersonationBooleanfalseWhether to allow impersonation by explicitly overriding username from outbound requests using io.helidon.security.EndpointConfig#PROPERTY_OUTBOUND_ID property
allow-unsignedBooleanfalseConfigure support for unsigned JWT
atn-tokenConfiguration for atn-token
authenticateBooleantrueWhether to authenticate requests
jwt-groups-pathStringgroupsPath to the JWT payload claim containing the groups to add as role grants
jwt-groups-separatorStringSeparator used to split a string claim value into multiple groups
optionalBooleanfalseWhether authentication is required
principal-typeSubjectTypeUSERPrincipal type this provider extracts (and also propagates)
propagateBooleantrueWhether to propagate identity
sign-tokenOutboundConfigConfiguration of outbound rules
use-jwt-groupsBooleantrueClaim groups from JWT will be used to automatically add groups to current subject (may be used with jakarta.annotation.security.RolesAllowed annotation)

Usages


See the manifest for all available types.

Copyright © 2018, 2026 Oracle and/or its affiliates.