JWT authentication

[avelino]

Support for "closed" endpoint by authentication

• validate http header if token is valid Authorization: Bearer <token>

[souenzzo]

OpenAPI has the concept of "Security" in paths/routes that we can flow

https://swagger.io/specification/

[avelino]

OpenAPI has the concept of "Security" in paths/routes that we can flow

it is important that moclojer's own specification has a similar behavior to openapi's, this document will help a lot to define how we will do the implementation

[avelino]

moclojer spec for http header Authorization

- auth:
    token: ab123
    endpoint: # optional
        method: POST # default `POST`
        path: /auth # default `/auth`
    all_endpoint: false # default `false`, forces all endpoints to have authentication
    domain: moclojer.com # optional
- endpoint:
    auth: true # default `false`, if `auth.all_endpoint: true`, it is not necessary to activate this option
    auth_token: abc123 # optional, if `auth: true` it has priority over this attribute
    [...]