verify_token_authorization

Suggest Edits

Version: `v2025-01-13`	Includes use: Yes

Behavior name: Auth Token 2.0 Verification

Verifies Auth 2.0 tokens.

Default behavior

These samples reflect the behavior's default settings. You can use these as is in your configurations or make adjustments based on the behavior's available options.

data "akamai_property_rules_builder" "verify_token_authorization" {
  rules_v2025_02_18 {
    name     = "Auth Token 2.0 Verification"
    comments = "Verifies Auth 2.0 tokens."
    behavior {
      verify_token_authorization {
        use_Advanced     = false
        location         = "COOKIE"
        location_id      = "__token__"
        key              = ""
        failure_response = true
      }
    }
  }
}

"behaviors": [
  {
    "name": "verifyTokenAuthorization",
    "options": {
      "useAdvanced": false,
      "location": "COOKIE",
      "locationId": "__token__",
      "key": "",
      "failureResponse": true
    }
  }
]

Options

Option	Description
`use_advanced`	Boolean If enabled, allows you to specify advanced options.
`location`	Enum Specifies where to find the token in the incoming request. Value is one of: `CLIENT_REQUEST_HEADER` `COOKIE` `QUERY_STRING`
`location_id`	String When `location` is `CLIENT_REQUEST_HEADER` specifies the name of the incoming request's header where to find the token.
`algorithm`	Enum \| Requires: `use_advanced` is `true` Specifies the algorithm that generates the token. It needs to match the method chosen in the token generation code. Value is one of: `MD5` `SHA1` `SHA256`
`escape_hmac_inputs`	Boolean \| Requires: `use_advanced` is `true` URL-escapes HMAC inputs passed in as query parameters.
`ignore_query_string`	Boolean \| Requires: `use_advanced` is `true` Enabling this removes the query string from the URL used to form an encryption key.
`key`	Object array \| Requires: `use_advanced` is `true` The shared secret used to validate tokens that matches the key used in the token generation code.
`transition_key`	Object array \| Requires: `use_advanced` is `true` Specifies a transition key as a hex value.
`salt`	Object array \| Requires: `use_advanced` is `true` Specifies a salt string for input when generating the token, which needs to match the salt value used in the token generation code.
`failure_response`	Boolean When enabled, sends an HTTP error when an authentication test fails.

Updated about 1 hour ago