# OpenSearch JWT authentication

**URL:** https://forum.opensearch.org/t/opensearch-jwt-authentication/10820
**Category:** Security
**Created:** [September 5, 2022, 7:38am UTC](https://forum.opensearch.org/t/opensearch-jwt-authentication/10820 "2022-09-05T07:38:18Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![mike6](https://avatars.discourse-cdn.com/v4/letter/m/46a35a/32.png) [@mike6](https://forum.opensearch.org/u/mike6)
#### Post date: [September 5, 2022, 7:38am UTC](https://forum.opensearch.org/t/opensearch-jwt-authentication/10820/1 "2022-09-05T07:38:18Z")

</div>

I’m trying to make the JWT authentication work and i’m consistently getting this error message:

> [2022-09-05T10:24:00,610][WARN][o.o.s.h.HTTPBasicAuthenticator] [mikeVIrtual] No ‘Basic Authorization’ header, send 401 and ‘WWW-Authenticate Basic’

Here is my config.yml:

```
authc:
  basic_internal_auth_domain:
    description: "Authenticate via HTTP Basic against internal users database"
    http_enabled: true
    transport_enabled: true
    order: 1
    http_authenticator:
      type: basic
      challenge: true
    authentication_backend:
      type: intern
  jwt_auth_domain:
    description: "Authenticate via Json Web Token"
    http_enabled: true
    transport_enabled: true
    order: 0
    http_authenticator:
      type: jwt
      challenge: false
      config:
        signing_key: YmlnIHNlY3JldA==
        jwt_header: "Authorization"
        jwt_url_parameter: null
        roles_key: roles
        subject_key: sub
    authentication_backend:
      type: noop

```

And here is my postman request:

---

<div class="post-metadata">

### Author: ![mike6](https://avatars.discourse-cdn.com/v4/letter/m/46a35a/32.png) [@mike6](https://forum.opensearch.org/u/mike6)
#### Post date: [September 6, 2022, 3:46pm UTC](https://forum.opensearch.org/t/opensearch-jwt-authentication/10820/2 "2022-09-06T15:46:40Z")

</div>

Please see the full question: [OpenSearch JWT authentication](https://forum.opensearch.org/t/opensearch-jwt-authentication/10822)