OverviewThe DECA API Gateway implements a dual authentication system supporting both JWT tokens and API keys for secure access to upstream services.JWT Token Generation and ManagementJWT Token Creation ProcessThe gateway automatically generates JWT tokens when API key authentication is used. This process ensures seamless integration with upstream services that expect JWT authentication.Token Generation FlowAPI Key Validation: Client provides API key in X-API-Key headerOrganization Lookup: Gateway validates API key and retrieves organization IDJWT Generation: Gateway generates a JWT token with organization contextToken Forwarding: Generated JWT is forwarded to upstream serviceJWT Generation Codefunc GenerateJWT(organizationID string, key string) (string, error) {cfg := config.GetConfig()now := time.Now()// Organization contextorganization := map[string]string{"organization_id": organizationID,}// User metadata (system user for API key auth)user := map[string]string{"email":"","name":"System","picture": "","user_id": "system",

<div class="bn-block-group" data-node-type="blockGroup"><div class="bn-block-outer" data-id="1e1def5e-7d1c-4f3b-9104-24dcf7da030a" data-node-type="blockOuter"><div class="bn-block" data-id="1e1def5e-7d1c-4f3b-9104-24dcf7da030a" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content"></p></div></div></div><div class="bn-block-outer" data-id="4bf23ba2-9a88-4e53-9a88-70db483085fe" data-node-type="blockOuter"><div class="bn-block" data-id="4bf23ba2-9a88-4e53-9a88-70db483085fe" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">Overview</p></div></div></div><div class="bn-block-outer" data-id="3fa26356-1699-4640-ba2a-4d22fb0f6d43" data-node-type="blockOuter"><div class="bn-block" data-id="3fa26356-1699-4640-ba2a-4d22fb0f6d43" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">The DECA API Gateway implements a dual authentication system supporting both JWT tokens and API keys for secure access to upstream services.</p></div></div></div><div class="bn-block-outer" data-id="b9b4b98c-a03a-4072-88fc-abfba439629d" data-node-type="blockOuter"><div class="bn-block" data-id="b9b4b98c-a03a-4072-88fc-abfba439629d" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content"></p></div></div></div><div class="bn-block-outer" data-id="f4332674-9e1f-4cbd-a454-bec61251f1f5" data-node-type="blockOuter"><div class="bn-block" data-id="f4332674-9e1f-4cbd-a454-bec61251f1f5" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">JWT Token Generation and Management</p></div></div></div><div class="bn-block-outer" data-id="0b3fbe73-bd1e-4e1a-a2d4-b298ef9acb9e" data-node-type="blockOuter"><div class="bn-block" data-id="0b3fbe73-bd1e-4e1a-a2d4-b298ef9acb9e" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">JWT Token Creation Process</p></div></div></div><div class="bn-block-outer" data-id="fcdedafc-e5e6-4cb6-938b-a7d3668a99b0" data-node-type="blockOuter"><div class="bn-block" data-id="fcdedafc-e5e6-4cb6-938b-a7d3668a99b0" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">The gateway automatically generates JWT tokens when API key authentication is used. This process ensures seamless integration with upstream services that expect JWT authentication.</p></div></div></div><div class="bn-block-outer" data-id="800d6411-6fc6-4b27-a26f-cf4eacba4c93" data-node-type="blockOuter"><div class="bn-block" data-id="800d6411-6fc6-4b27-a26f-cf4eacba4c93" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content"></p></div></div></div><div class="bn-block-outer" data-id="808fb19e-9d28-4808-98ae-59d7630cb127" data-node-type="blockOuter"><div class="bn-block" data-id="808fb19e-9d28-4808-98ae-59d7630cb127" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">Token Generation Flow</p></div></div></div><div class="bn-block-outer" data-id="e6d480cd-541d-4c3a-9743-5966182362c9" data-node-type="blockOuter"><div class="bn-block" data-id="e6d480cd-541d-4c3a-9743-5966182362c9" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">API Key Validation: Client provides API key in X-API-Key header</p></div></div></div><div class="bn-block-outer" data-id="a25c610b-433e-4f19-8311-93b106f91705" data-node-type="blockOuter"><div class="bn-block" data-id="a25c610b-433e-4f19-8311-93b106f91705" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">Organization Lookup: Gateway validates API key and retrieves organization ID</p></div></div></div><div class="bn-block-outer" data-id="aa1da90d-673d-4e3c-897e-eacaf231f374" data-node-type="blockOuter"><div class="bn-block" data-id="aa1da90d-673d-4e3c-897e-eacaf231f374" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">JWT Generation: Gateway generates a JWT token with organization context</p></div></div></div><div class="bn-block-outer" data-id="607ecd76-289f-4cdc-8d55-021fc12c63ea" data-node-type="blockOuter"><div class="bn-block" data-id="607ecd76-289f-4cdc-8d55-021fc12c63ea" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">Token Forwarding: Generated JWT is forwarded to upstream service</p></div></div></div><div class="bn-block-outer" data-id="0bf1c85c-d9bc-4499-9654-23123917b210" data-node-type="blockOuter"><div class="bn-block" data-id="0bf1c85c-d9bc-4499-9654-23123917b210" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">JWT Generation Code</p></div></div></div><div class="bn-block-outer" data-id="e8583106-0fd3-4579-a712-67df66951975" data-node-type="blockOuter"><div class="bn-block" data-id="e8583106-0fd3-4579-a712-67df66951975" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">func GenerateJWT(organizationID string, key string) (string, error) {</p></div></div></div><div class="bn-block-outer" data-id="484a9c0b-71b8-4369-9c7d-e61f7c976959" data-node-type="blockOuter"><div class="bn-block" data-id="484a9c0b-71b8-4369-9c7d-e61f7c976959" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">cfg := config.GetConfig()</p></div></div></div><div class="bn-block-outer" data-id="30ee4aee-5762-4fbe-851f-79c14328eb71" data-node-type="blockOuter"><div class="bn-block" data-id="30ee4aee-5762-4fbe-851f-79c14328eb71" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">now := time.Now()</p></div></div></div><div class="bn-block-outer" data-id="6afa79cd-412b-455c-b594-7b729680d985" data-node-type="blockOuter"><div class="bn-block" data-id="6afa79cd-412b-455c-b594-7b729680d985" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content"></p></div></div></div><div class="bn-block-outer" data-id="c818479e-0b09-4058-8c75-fac682095f8e" data-node-type="blockOuter"><div class="bn-block" data-id="c818479e-0b09-4058-8c75-fac682095f8e" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">// Organization context</p></div></div></div><div class="bn-block-outer" data-id="61eb18c9-fd0c-4cdf-a742-0dd3e16c4cbb" data-node-type="blockOuter"><div class="bn-block" data-id="61eb18c9-fd0c-4cdf-a742-0dd3e16c4cbb" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">organization := map[string]string{</p></div></div></div><div class="bn-block-outer" data-id="2fd406f8-d8b4-4876-bb7a-2ebe95376f68" data-node-type="blockOuter"><div class="bn-block" data-id="2fd406f8-d8b4-4876-bb7a-2ebe95376f68" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">"organization_id": organizationID,</p></div></div></div><div class="bn-block-outer" data-id="5d2c7287-7ea4-428b-84e5-b05349c0f730" data-node-type="blockOuter"><div class="bn-block" data-id="5d2c7287-7ea4-428b-84e5-b05349c0f730" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">}</p></div></div></div><div class="bn-block-outer" data-id="b962bdf7-ad1b-4617-ad2e-e8fc808598f4" data-node-type="blockOuter"><div class="bn-block" data-id="b962bdf7-ad1b-4617-ad2e-e8fc808598f4" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content"></p></div></div></div><div class="bn-block-outer" data-id="2b5e32be-8f2e-44d5-848b-33823557ab45" data-node-type="blockOuter"><div class="bn-block" data-id="2b5e32be-8f2e-44d5-848b-33823557ab45" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">// User metadata (system user for API key auth)</p></div></div></div><div class="bn-block-outer" data-id="bc27a266-fbb4-45bf-939d-72e5877b3c08" data-node-type="blockOuter"><div class="bn-block" data-id="bc27a266-fbb4-45bf-939d-72e5877b3c08" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">user := map[string]string{</p></div></div></div><div class="bn-block-outer" data-id="ca25eec9-033f-4abc-a622-4b3df3ffff91" data-node-type="blockOuter"><div class="bn-block" data-id="ca25eec9-033f-4abc-a622-4b3df3ffff91" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">"email":   "",</p></div></div></div><div class="bn-block-outer" data-id="2e1a4931-a97d-418a-96ea-2b6dee891e0a" data-node-type="blockOuter"><div class="bn-block" data-id="2e1a4931-a97d-418a-96ea-2b6dee891e0a" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">"name":    "System",</p></div></div></div><div class="bn-block-outer" data-id="47a1fc87-adfe-47f4-985b-40334227e54c" data-node-type="blockOuter"><div class="bn-block" data-id="47a1fc87-adfe-47f4-985b-40334227e54c" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">"picture": "",</p></div></div></div><div class="bn-block-outer" data-id="568a6897-7114-4885-b0d2-9a819ab6a963" data-node-type="blockOuter"><div class="bn-block" data-id="568a6897-7114-4885-b0d2-9a819ab6a963" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content">"user_id": "system",</p></div></div></div><div class="bn-block-outer" data-id="6236805e-0124-41ee-893f-4e3ff0f2076c" data-node-type="blockOuter"><div class="bn-block" data-id="6236805e-0124-41ee-893f-4e3ff0f2076c" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content"></p></div></div></div><div class="bn-block-outer" data-id="186f6c41-666b-466d-bafc-5b687d4e64b3" data-node-type="blockOuter"><div class="bn-block" data-id="186f6c41-666b-466d-bafc-5b687d4e64b3" data-node-type="blockContainer"><div class="bn-block-content" data-content-type="paragraph"><p class="bn-inline-content"></p></div></div></div></div>