# Again on API already protected by JWT

**URL:** <https://discuss.konghq.com/t/again-on-api-already-protected-by-jwt/3652>\
**Category:** Questions\
**Created:** [May 30, 2019, 10:06am UTC](https://discuss.konghq.com/t/again-on-api-already-protected-by-jwt/3652 "2019-05-30T10:06:45Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![a.fontana](https://avatars.discourse-cdn.com/v4/letter/a/5daacb/32.png) [@a.fontana](https://discuss.konghq.com/u/a.fontana)\
**Post date:** [May 30, 2019, 10:06am UTC](https://discuss.konghq.com/t/again-on-api-already-protected-by-jwt/3652/1 "2019-05-30T10:06:45Z")

</div>

HI, I need to expose my BE API, thru KONG.  
Usually my BE API server, when you call a specific API, request the authentication.  
the process is, user send a request, it’s redirect to the authentication server, if ok they receive an JWT token, and submit request to the API with “Authorization: Bearer XXXXXX …” injected in header.

How i can reproduce this path in KONG configuration?

I try mapping  
one path to the login-server, and when i call that service, via curl POST, i receive the token in answer via KONG  
and other path to expose my API  
now how i can calling second path attach first to obtain Token?

for sample  
I hope to expose  
[http://kong.xxxxx.xom/getusers](http://kong.xxxxx.xom/getusers) to get the list of users

and KONG get the request, but before to send it to the BE, use the route /login to authenticate users, and received a JWT token, and use it to send request to the BE (/getusers)  
and replay the answer list to the clinet.

 ![schemaAuth](https://canada1.discourse-cdn.com/flex036/uploads/konghq/original/2X/f/f57ff8ea25a39fb285c425cd07237817db77702c.jpeg)