@@ -102,7 +102,7 @@ location / {
102102Syntax: auth_jwt string [token=$variable] | off;
103103Default: auth_jwt off;
104104Context: server
105- Context: http, server, location
105+ Context: http, server, location, limit_except
106106```
107107
108108Enables validation of JSON Web Token. The specified string is used as a realm.
@@ -149,7 +149,7 @@ For arrays, the variable keeps a list of array elements separated by commas.
149149```
150150Syntax: auth_jwt_key_file file [ jwks | keyval] ;
151151Default: -
152- Context: http, server, location
152+ Context: http, server, location, limit_except
153153```
154154
155155Specifies a file for validating JWT signature.
@@ -174,7 +174,7 @@ Several `auth_jwt_key_file` directives can be specified on the same level.
174174```
175175Syntax: auth_jwt_key_request uri [ jwks | keyval] ;
176176Default: -
177- Context: http, server, location
177+ Context: http, server, location, limit_except
178178```
179179
180180Allows retrieving a key from a subrequest for validating JWT signature and
@@ -218,7 +218,7 @@ Several `auth_jwt_key_request` directives can be specified on the same level.
218218```
219219Syntax: auth_jwt_validate_exp on | off;
220220Default: auth_jwt_validate_exp on;
221- Context: http, server, location
221+ Context: http, server, location, limit_except
222222```
223223
224224Determines whether to validating the exp JWT claim.
@@ -229,7 +229,7 @@ Determines whether to validating the exp JWT claim.
229229```
230230Syntax: auth_jwt_validate_sig on | off;
231231Default: auth_jwt_validate_sig on;
232- Context: http, server, location
232+ Context: http, server, location, limit_except
233233```
234234
235235Determines whether to validating JWT signature.
@@ -263,7 +263,7 @@ Specifies the phase to be processed.
263263```
264264Syntax: auth_jwt_revocation_list_sub file;
265265Default: -
266- Context: http, server, location
266+ Context: http, server, location, limit_except
267267```
268268
269269Specifies a file with list of JWT sub claims that deny authentication.
@@ -294,7 +294,7 @@ Every object should have key(jwt sub) and any additional value, if it needed.
294294```
295295Syntax: auth_jwt_revocation_list_kid file;
296296Default: -
297- Context: http, server, location
297+ Context: http, server, location, limit_except
298298```
299299
300300Specifies a file with list of JWT kid headers that deny authentication.
@@ -331,7 +331,7 @@ that kid will grow to **REQUIRED**
331331```
332332Syntax: auth_jwt_require $value ... [ error=401 | 403] ;
333333Default: -
334- Context: http, server, location
334+ Context: http, server, location, limit_except
335335```
336336
337337Specifies additional checks for JWT validation.
@@ -356,7 +356,7 @@ The optional error parameter allows redefining the error code to 403.
356356```
357357Syntax: auth_jwt_require_claim claim_name operator $variable | json=string | string;
358358Default: -
359- Context: http, server, location
359+ Context: http, server, location, limit_except
360360```
361361
362362Specifies a requirement for claim in jwt token.
@@ -430,7 +430,7 @@ required json[^json] value.
430430```
431431Syntax: auth_jwt_require_header header_name operator $variable;
432432Default: -
433- Context: http, server, location
433+ Context: http, server, location, limit_except
434434```
435435Specifies a requirement for header in jwt token.
436436
0 commit comments