Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Clarify documentation around dapr-api-token #4050

Merged
merged 5 commits into from
Mar 4, 2024
Merged

Clarify documentation around dapr-api-token #4050

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
b680794
clarify the header/metadata coming from Dapr
hhunter-ms Feb 28, 2024
7a3cb5d
updates per mark
hhunter-ms Mar 1, 2024
4a6dadf
Merge branch 'v1.12' into issue_3680
hhunter-ms Mar 1, 2024
62e08b9
Merge branch 'v1.12' into issue_3680
hhunter-ms Mar 4, 2024
0789744
Merge branch 'v1.12' into issue_3680
hhunter-ms Mar 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions daprdocs/content/en/operations/security/app-api-token.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,14 +89,14 @@ kubectl rollout restart deployment/<deployment-name> --namespace <namespace-name

## Authenticating requests from Dapr

Once app token authentication is configured in Dapr, all requests *coming from Dapr* include the token.
Once app token authentication is configured using the environment variable or Kubernetes secret `app-api-token`, the Dapr sidecar always includes the HTTP header/gRPC metadata `dapr-api-token: <token>` in the calls to the app. From the app side, ensure you are authenticating using the `dapr-api-token` value, even though you set `app-api-token` to enable API authentication.
hhunter-ms marked this conversation as resolved.
Show resolved Hide resolved

### HTTP

In case of HTTP, in your code look for the HTTP header `dapr-api-token` in incoming requests:
In your code, look for the HTTP header `dapr-api-token` in incoming requests:

```text
dapr-api-token: <token>
a-api-token: <token>
hhunter-ms marked this conversation as resolved.
Show resolved Hide resolved
```

### gRPC
Expand Down
Loading