ring.middleware.jwt — ovotech/ring-jwt 2.1.0

read-token-from-header clj

(read-token-from-header header-name)

Finds the token by searching the specified HTTP header (case-insensitive) for a bearer token.

wrap-jwt clj

(wrap-jwt handler
          {:keys [find-token-fn issuers reject-missing-token?]
           :or {reject-missing-token? false}
           :as opts})

Middleware that decodes a JWT token, verifies against the signature and then adds the decoded claims to the incoming request under :claims.

If the JWT token exists but cannot be decoded then the token is considered tampered with and a 401 response is produced.

If the JWT token does not exist, an empty :claims map is added to the incoming request.