{"action":"created","issue":{"url":"https://api.github.com/repos/TykTechnologies/tyk/issues/176","labels_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/176/labels{/name}","comments_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/176/comments","events_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/176/events","html_url":"https://github.com/TykTechnologies/tyk/issues/176","id":127940338,"number":176,"title":"JWT Authorization","user":{"login":"senj","id":5556013,"avatar_url":"https://avatars.githubusercontent.com/u/5556013?v=3","gravatar_id":"","url":"https://api.github.com/users/senj","html_url":"https://github.com/senj","followers_url":"https://api.github.com/users/senj/followers","following_url":"https://api.github.com/users/senj/following{/other_user}","gists_url":"https://api.github.com/users/senj/gists{/gist_id}","starred_url":"https://api.github.com/users/senj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/senj/subscriptions","organizations_url":"https://api.github.com/users/senj/orgs","repos_url":"https://api.github.com/users/senj/repos","events_url":"https://api.github.com/users/senj/events{/privacy}","received_events_url":"https://api.github.com/users/senj/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-01-21T14:46:51Z","updated_at":"2016-01-21T15:06:42Z","closed_at":"2016-01-21T15:06:42Z","body":"Hi,\r\n\r\nThe documentation about JWT seems to be very specific. I have the (Thinktecture) Identity Server issuing JWT tokens. My certificate uses signature algorithm sha1RSA (it's a windows pfx file).\r\nThere is also this header in my token:\r\n\"kid\": \"a3r....\"\r\n\r\nMy flow would look like this:\r\nClient <-  token -> Authorization Server\r\nClient -- Auth: Bearer Token --> Tyk Gateway (check rate limiting, etc.)\r\nTyk -- Auth: Bearer Token --> API\r\n\r\nAll I can select in the Gateway options is JWT and RSA... ? Via the API the docu says I have to create some certs, but I want to use my exiting one.\r\nI read about a key I have to create with the Tyk API to connect to a session? What do I have to do with this key? Seems to be not very user friendly.\r\n\r\nGreetings..\r\n "},"comment":{"url":"https://api.github.com/repos/TykTechnologies/tyk/issues/comments/173598912","html_url":"https://github.com/TykTechnologies/tyk/issues/176#issuecomment-173598912","issue_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/176","id":173598912,"user":{"login":"lonelycode","id":2444409,"avatar_url":"https://avatars.githubusercontent.com/u/2444409?v=3","gravatar_id":"","url":"https://api.github.com/users/lonelycode","html_url":"https://github.com/lonelycode","followers_url":"https://api.github.com/users/lonelycode/followers","following_url":"https://api.github.com/users/lonelycode/following{/other_user}","gists_url":"https://api.github.com/users/lonelycode/gists{/gist_id}","starred_url":"https://api.github.com/users/lonelycode/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lonelycode/subscriptions","organizations_url":"https://api.github.com/users/lonelycode/orgs","repos_url":"https://api.github.com/users/lonelycode/repos","events_url":"https://api.github.com/users/lonelycode/events{/privacy}","received_events_url":"https://api.github.com/users/lonelycode/received_events","type":"User","site_admin":false},"created_at":"2016-01-21T15:06:42Z","updated_at":"2016-01-21T15:06:42Z","body":"Are you reporting a bug? The JWT implementation is specific to you generating your own JWTs, not 3rd parties and works as described in the docs.\r\n\r\nFor third party integration I suggest using Tyk Identity Broker.\r\n\r\nThere's centralised JWT on the way where you can use virtual tokens (see the community forum and other issues in this issue tracker) that are generated elsewhere."}}