How to pass client cert CN to backend as JWT

[hsiung]

How do I use APISIX plugins to get the CN of TLS client certificate, extract a substring of it, generate a JWT with this substring as subject and pass the JWT as Authorization header bearer token to the backend?

[tokers]

Write your own plugin, using Nginx variables like:

$ssl_client_s_dn

You can parse the Subject format by yourself.

[hsiung]

So does it mean that there are no plugin I can reuse for this quite standard use case? Or does it mean that the plugin concept is flawed (DRY not encouraged)?

[tzssangglass]

You can modify or enhance the plugin as needed, which is open source.