Access request headers from JWTCallerPrincipalFactory

I am using Quarkus with quarkus-smallrye-jwt and I want to access the request headers from a custom subclass of JWTCallerPrincipalFactory as explained by https://quarkus.io/guides/security-jwt#custom-factories. Is there a way to do that?

Solution

I solved it by using an implementation of HttpAuthenticationMechanism which has access to the RoutingContext as described here https://quarkus.io/guides/security-customization#httpauthenticationmechanism-customization

Creating JWT in Coldfusion for google Service account
Unexpected JWT alg received, expected RS256, got: HS256
Spring Security issue with JWT: Cannot subclass final class JwtAuthenticationProvider
Why do I get a "io.jsonwebtoken.ExpiredJwtException"?
.NET Core 3.1 GoogleSignIn -The authentication handler registered for scheme 'Bearer' is 'JwtBearerHandler' which cannot be used for SignInAsync
JWT signature verification failing
IDX10603: The algorithm: 'HS256' requires the SecurityKey.KeySize to be greater than '128' bits. KeySize reported: '32'. Parameter name: key.KeySize
How can I securize my code-first gRPC endpoints using Azure Authentication?
AWS Lambda Custom JWT Validation
Flask JWT Extended missing csrf access token
Where should I refresh my JWT in SvelteKit
Token is generated at the endpoint but does not arrive on the page
Is it okay to encrypt a 3rd party access token and refresh token, in an encrypted JWT?
In JWT Authentication in .NET 7, how can a "validated" token be "missing"?
What to validate 'iat' and 'sub' claims of a JWT against?
How to use jti claim in a JWT
Can't import jwt-decode in JavaScript file in React project
JWT and CSRF differences
Getting 'secretOrPrivateKey must have a value' error in NestJS JWT authentication
Google Sheets, JWT client with Service Account
Angular 17 & dot net Core 8 - Jwt on refresh adding to Audience
Is "scope" a standard claim?
Error when trying to Promisify JWT in Typescript
reactjs call multiple axios posts in one async function
TS2339: Property 'scope' does not exist on type 'JwtPayload'
Generating JWT token with JwtUtil class in Spring Boot resulting in NullPointerException
Azure authentification for multiple audience using WithExtraScopesToConsent and AcquireTokenSilent
Express and React Token Authentication: req.cookies is empty in application but works in Postman
Manually calculating JWT signature never outputs the real signature
Why is lexik-jwt bundle returning an empty token with correct credentials?