Skip to main content
API7.ai Logo

Parameters​

See plugin common configurations for configuration options available to all plugins.

Consumers​

The following are plugin attributes available for configurations on consumers.

  • key

    string

    required

    A unique key that identifies the credential for a consumer.

  • secret

    string

    required

    vaild vaule:

    32 bytes

    A shared symmetric key of 32 bytes, given as a literal value — either plaintext, or base64url encoded with is_base64_encoded set. The Control Plane checks the length of the value as written, so a $env:// or $secret:// reference is rejected unless the reference string itself happens to be 32 characters.

  • is_base64_encoded

    boolean

    default: false

    Set to true if the secret is base64url encoded. The decoded secret must still be 32 bytes.

Routes or Services​

The following are plugin attributes available for configurations on routes or services.

  • header

    string

    required

    default: Authorization

    The header to get the token from.

  • forward_header

    string

    required

    default: Authorization

    Name of the header that passes the plaintext to the upstream.

  • strict

    boolean

    default: true

    If true, return a 403 error when the encrypted plugin token is missing. If false, continue when the token is not found.