install(Authentication) {
jwt("auth-jwt") {
verifier(JwtConfig.verifier)
validate { credential ->
if (credential.payload.audience.contains("ktor-app")) JWTPrincipal(credential.payload) else null
}
}
}
routing {
authenticate("auth-jwt") {
get("/secure") { call.respondText("You are authorized!") }
}
}
→ Прямой аналог Spring Security с фильтром и JWT токеном.
