From 73f88a9406b62e2a8bb0cb6dad3d576a8d824710 Mon Sep 17 00:00:00 2001
From: ike thecoder <ikethecoder@copeconsulting.ca>
Date: Thu, 9 Nov 2023 09:48:31 -0800
Subject: [PATCH] kong upstream jwt plugin defaults (#107)

* allow overrides for upstream jwt plugin
* add upstream config in the entrypoint
* upd upstream jwt issuer default
---
 microservices/gatewayApi/entrypoint.sh       |  6 ++++++
 microservices/gatewayApi/utils/transforms.py | 15 +++++++++++++++
 2 files changed, 21 insertions(+)

diff --git a/microservices/gatewayApi/entrypoint.sh b/microservices/gatewayApi/entrypoint.sh
index 4b41166..2c5cfad 100755
--- a/microservices/gatewayApi/entrypoint.sh
+++ b/microservices/gatewayApi/entrypoint.sh
@@ -45,6 +45,12 @@ cat > "${CONFIG_PATH:-./config/default.json}" <<EOF
             "redis_password": "${PLUGINS_RATELIMITING_REDIS_PASSWORD}",
             "redis_timeout": 2000
         },
+        "upstream_jwt": {
+            "key_id": "${PLUGINS_UPSTREAM_JWT_KEY_ID}",
+            "issuer": "${PLUGINS_UPSTREAM_JWT_ISSUER}",
+            "private_key_location": "${PLUGINS_UPSTREAM_JWT_PRIVATE_KEY_FILE}",
+            "public_key_location": "${PLUGINS_UPSTREAM_JWT_PUBLIC_KEY_FILE}"
+        },
         "proxy_cache": {
             "strategy": "memory",
             "memory": { "dictionary_name": "${PLUGINS_PROXYCACHE_MEMORY_DICT:-"aps_proxy_cache"}" }
diff --git a/microservices/gatewayApi/utils/transforms.py b/microservices/gatewayApi/utils/transforms.py
index 687ea76..19644bc 100644
--- a/microservices/gatewayApi/utils/transforms.py
+++ b/microservices/gatewayApi/utils/transforms.py
@@ -21,6 +21,19 @@ def proxy_cache (plugin, plugin_configs=None):
     for k, v in override_config.items():
         plugin_config[k] = v
 
+def upstream_jwt (plugin, plugin_configs=None):
+    override_config = conf['plugins']['upstream_jwt']
+
+    if 'config' in plugin:
+        plugin_config = plugin['config']
+    else:
+        plugin['config'] = {}
+        plugin_config = plugin['config']
+
+    for k, v in override_config.items():
+        plugin_config[k] = v
+
+
 def rate_limiting (plugin, plugin_configs=None):
     override_config = conf['plugins']['rate_limiting']
 
@@ -77,6 +90,8 @@ def traverse_plugins (yaml, plugin_configs = None):
                         rate_limiting(item, plugin_configs)
                     elif item['name'] == 'proxy-cache':
                         proxy_cache(item, plugin_configs)
+                    elif item['name'] == 'kong-upstream-jwt':
+                        upstream_jwt(item, plugin_configs)
                 traverse_plugins (item, plugin_configs)