name: jwt enabled: true service-id: Associates the plugin with a specific upstream service. JWT authentication is enforced only for traffic routed to this service. - grpc - grpcs - http - https config-claims_to_verify: - exp : The exp (expiration) claim ensures that tokens are rejected once their validity period has elapsed. config-header_names: - authorization : In this case, the token is expected in the standard Authorization header (typically as a Bearer token) config-key_claim_name: iss : The iss (issuer) claim is used to match the token to the appropriate JWT credential configured in the gateway. config-maximum_expiration: 0 config-run_on_preflight: false config-secret_is_base64: false config-uri_param_names: - jwt : This allows tokens to be passed as a URL parameter named jwt, in addition to headers. id: service_id-id: Confirms the binding between this plugin instance and the targeted service.