{"id":37201217,"url":"https://github.com/music-tribe/azadjwtvalidation","last_synced_at":"2026-01-14T23:12:05.787Z","repository":{"id":62954408,"uuid":"561956877","full_name":"music-tribe/azadjwtvalidation","owner":"music-tribe","description":null,"archived":false,"fork":false,"pushed_at":"2025-06-16T10:21:19.000Z","size":732,"stargazers_count":6,"open_issues_count":2,"forks_count":1,"subscribers_count":6,"default_branch":"master","last_synced_at":"2025-06-16T10:25:31.559Z","etag":null,"topics":["traefik-plugin"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/music-tribe.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-11-04T22:22:22.000Z","updated_at":"2025-06-16T10:21:20.000Z","dependencies_parsed_at":"2024-06-21T11:53:03.663Z","dependency_job_id":"778e185a-d18d-4bd7-a849-1782d6659b22","html_url":"https://github.com/music-tribe/azadjwtvalidation","commit_stats":{"total_commits":29,"total_committers":3,"mean_commits":9.666666666666666,"dds":"0.27586206896551724","last_synced_commit":"cc269b97056fc6ec1c291f0657a2794576f820d0"},"previous_names":[],"tags_count":13,"template":false,"template_full_name":null,"purl":"pkg:github/music-tribe/azadjwtvalidation","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/music-tribe%2Fazadjwtvalidation","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/music-tribe%2Fazadjwtvalidation/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/music-tribe%2Fazadjwtvalidation/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/music-tribe%2Fazadjwtvalidation/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/music-tribe","download_url":"https://codeload.github.com/music-tribe/azadjwtvalidation/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/music-tribe%2Fazadjwtvalidation/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28437937,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T22:37:52.437Z","status":"ssl_error","status_checked_at":"2026-01-14T22:37:31.496Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["traefik-plugin"],"created_at":"2026-01-14T23:12:05.058Z","updated_at":"2026-01-14T23:12:05.747Z","avatar_url":"https://github.com/music-tribe.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Go](https://github.com/music-tribe/azadjwtvalidation/actions/workflows/go.yml/badge.svg)](https://github.com/music-tribe/azadjwtvalidation/actions/workflows/go.yml)\n[![CodeQL](https://github.com/music-tribe/azadjwtvalidation/actions/workflows/codeql.yml/badge.svg)](https://github.com/music-tribe/azadjwtvalidation/actions/workflows/codeql.yml)\n[![codecov](https://codecov.io/gh/music-tribe/azadjwtvalidation/branch/master/graph/badge.svg?token=GCEU8TO2WY)](https://codecov.io/gh/music-tribe/azadjwtvalidation)\n\n# Azure Active Directory JWT validation\n\n\u003e This project is a Traefik plugin based on the work of [dkijkuit](https://github.com/dkijkuit/azurejwttokenvalidation). \n\nThis is a Traefik plugin which validates JWT tokens generated by Azure Active Directory and verifies the claims.\n\n## Supported properties\n\n| Name | Description | Type | Required |\n|------|-------------|------|----|\n|keysurl | Azure AD Tenant's keys url. |*string*|  yes  |\n|issuer | Allowed token issuer. Values for Azure AD and Azure AD B2C are different. |*string*| yes  |\n|audience | Allowed audience(s). Audience can either be a single value or a comma separated list of audiences. |*string*| yes  |\n|roles | List of roles to be validated by the plugin. |*string[]*| no  |\n|matchallroles | Flag to let plugin know if all roles need to be matched to return success. |*boolean*| no  |\n|loglevel | Log level for plugin execution. Defaults to *'WARN'* level. \u003cbr /\u003e\u003cbr /\u003e **Possible Values:** INFO, WARN, DEBUG.  |*string*| no  |\n|logheaders | If specified, the listed HTTP headers will be added to the logs. Defaults to adding no headers to the logs. \u003cbr /\u003e\u003cbr /\u003e **Security Warning:** Some headers might contain personal or private data. Please choose the data you log carefully or implement mechanisms to make the data available to the correct audience. |*string[]*| no  |\n|updatekeyseveryminutes| If specified, sets the interval for updating public keys from the keysurl. Will default to 24 hours. |*int*| no |\n|updatekeyswithbackoffretries| If specified, when periodically updating public keys and there is an error, we will backoff retry the number of times specified. Will default to 0, no retries. |*uint64*| no |\n\n## Example configuration\n\n```yaml\napiVersion: traefik.containo.us/v1alpha1\nkind: Middleware\nmetadata:\n    name: azadjwtvalidation\n    namespace: traefik\nspec:\n    plugin:\n        azadjwtvalidation:\n            keysurl: \"https://contoso.b2clogin.com/contoso.onmicrosoft.com/b2c_1_signupsignin1/discovery/v2.0/keys\"\n            issuer: \"https://contoso.b2clogin.com/eecc1921-e709-45c6-b5dc-0a92d28ae4b1/v2.0/\"\n            audience: \"d304eaf9-e22f-48f5-b3cf-c03dcc5452ff,d14ce77d-5be7-437b-b165-16b57813ec4c\"\n            updatekeyswithbackoffretries: 3\n```\n\n## Running Plugin in Local Mode\n\nMore information available [here](https://plugins.traefik.io/install).\n\n```bash\nmkdir -p traefik/plugins-local/src/github.com/music-tribe\nln -s `pwd` traefik/plugins-local/src/github.com/music-tribe/azadjwtvalidation\ncp static-dev-config.yml traefik/config.yml\ncd traefik\ntraefik --configfile config.yaml\n```\n\n\u003e Update `dynamic-dev-config.yml` as appropriate\n\nEnsure you don't have any mocks locally as you will get a panic when running. You can remove local mocks using:\n```bash\nmake clean_mocks\n```\n\n## Relevant links\n\n- [jwt.ms](https://jwt.ms/) - validate your Azure AD and Azure AD B2C token online\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmusic-tribe%2Fazadjwtvalidation","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmusic-tribe%2Fazadjwtvalidation","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmusic-tribe%2Fazadjwtvalidation/lists"}