Camunda WebApp and OAuth2 JWT

[hanscrg]

Our embedded Camuda/Spring Boot application runs behind of Spring Cloud Gateway. The Cloud Gateway completed OAuth2 Authentication and forward the JWT token with HTTP request to Camunda WebApp. Now the question is how to make Camunda take that JWT token, verify it and complete the authorization instead of sending back Basic login form?

[tmetzke]

Hi @hanscr,

maybe this thread will help you make progress:

JWT Authentication pattern/plugin for Camunda Spring Boot and Tomcat

Hey all I have put together a set of code based on the work from Camunda’s Authentication providers and the Camunda GraphQL jwt usage, where you can use a JWT token to authenticate with Camunda, and the Token will contain the Username, Group List and Tenant List that your action will be part of. Anyone have use for this? We use it because of the way that we typically interact with Camunda, where Camunda is a generic microservice that does not have users other than the Admins. But in some cas…

Feel free to search the forum for other JWT threads as there are quite some with helpful answers already.

Best
Tobias