Add "typ" attribute in JWT header when signing tokens

[MinKyawNyunt]

Environment info:

• KrakenD version: 2.2.1
• System info: docker

Describe what are you trying to do:
Adding additional in Header

configuration:

{
      "endpoint": "/auth/login",
      "method": "POST",
      "backend": [
        {
          "host": [
            "http://nginx:81"
          ],
          "url_pattern": "/api/login",
          "sd": "static",
          "method": "POST",
          "extra_config": {
            "backend/http": {
              "return_error_details": "auth"
            }
          }
        }
      ],
      "extra_config": {
        "auth/signer": {
          "alg": "HS256",
          "kid": "user",
          "keys_to_sign": [
            "access_token",
            "refresh_token"
          ],
          "jwk_url": "http://nginx:81/api/jwk",
          "disable_jwk_security": true
        }
      },
      "input_headers": [
        "Accept",
        "Content-Type"
      ]
    },

jwt decode header output

{
  "alg": "HS256",
  "kid": "user"
}

expected decode header result

{
  "alg": "HS256",
  "kid": "user"
  "typ": "JWT"
}

[alombarte]

Hi @MinKyawNyunt , this feature is not currently supported, but we can add it in future releases

[kpacha]

for future references, the change should go here: https://github.com/krakendio/krakend-jose/blob/master/jws.go#L141

[github-actions]

This issue is easy for contributing. Everyone can work on this.

---

This is an automated comment. Responding to the bot or mentioning it won't have any effect

[AlyHKafoury]

Hello @kpacha @alombarte Can I work on this ?

[kpacha]

@AlyHKafoury sure! contributions are always welcome!!!

[AlyHKafoury]

would this be enough ? krakend/krakend-jose#119 , or there is other places where the header will need to be modified.

[alombarte]

Thank you very much @AlyHKafoury for your contribution! I see there are minor changes requested in the PR, if you add them we will release this in KrakenD 2.5 which is round the corner

[AlyHKafoury]

I will work on it now and see if I can get a clear

[kpacha]

This will be released with v2.6, planned on mid Feb 2024

[AlyHKafoury]

Is there any connected issues that are urgent I can contribute to ?

…

________________________________ From: Daniel López ***@***.***> Sent: Tuesday, January 16, 2024 3:04 PM To: krakend/krakend-ce ***@***.***> Cc: Aly Kafoury ***@***.***>; Mention ***@***.***> Subject: Re: [krakend/krakend-ce] Add "typ" attribute in JWT header when signing tokens (Issue #711) This will be released with v2.6, planned on mid Feb 2024 — Reply to this email directly, view it on GitHub<#711 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AIKUBD2JA4SIG5BTDDUPLX3YOZ3GVAVCNFSM6AAAAAAXDIRCPSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQOJTG4YDKOBUGY>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[alombarte]

Hi @AlyHKafoury , thank you for your support! There are no urgent issues, but feel free to navigate through the almost 1000 questions and requests we opened have: https://github.com/search?l=&o=asc&q=user%3Akrakend&state=open&type=Issues
I am closing this issue, as this is already integrated on the master branch.