Book 5 · Lesson 5.2

JWT verification at edge

Mint dev JWT with mint_dev_jwt
Trace require_manager_jwt middleware
Call /api with Bearer token

Prerequisites: 5.1 · 3.2

Book 3 taught JWT concepts — Book 5 operates the gateway.

export TOKEN="$(cargo run -q -p millipede-gateway --bin mint_dev_jwt)"
curl -sk https://localhost:8443/api/metrics/summary -H "Authorization: Bearer $TOKEN"

Step through JwtValidationFlow again with gateway context.

Teach-back prompt

What HTTP status without Bearer header?

Gateway JWT curl

Mint TOKEN with mint_dev_jwt.
curl /api/metrics/summary with Bearer.
Retry without header — expect 401.

Lesson 5.2 check

1. Protected routes require… Kafka key Bearer JWT Postgres password WASM