I’ve configured my Kong like this:
plugins:
jwt:
enabled: true
# If global=true, all routes will be protected by jwt
global: true
How could I add a service behind Kong that does not use JWT tokens?
We have a /token endpoint used to hand out JWT tokens for the other APIs, so it would need an exception from the global JWT configuration. How is that done?
I would like to be able to keep the plugin global, forcing auth by JWT unless explicitly specified.