Forum Discussion
Khalid_A
Nimbostratus
NimbostratusCreating JWS session tables
Hi,
We're implementing API authentication/authorization based on JWT.
The API and authorization server are all behind F5.
We've been asked just to store the JWS sent back from the authorization ...
rob_carr
Cirrocumulus
CirrocumulusWhat value is taken for the $internal_key variable?
 
How will the &ext_key variable be derived? 
In both cases, you'll likely need to use the HTTP::header command, to extract the JWT token from the serverside-flow and to provide the F5 supplied cookie on the first connection, and to read the f5 supplied cookie and map that to the internal JWT.
 
