---
hide:
  - toc
---

# Request Authentication

This authentication mode can be used when an external user initiates a request for mesh internal services. In this mode, request encryption is implemented using JSON Web Token (JWT).
Each request authentication needs to configure an [Authorization Policy](./authorize.md).

All workloads labeled __app: httpbin__ require JWT authentication. Examples are as follows:

```yaml
apiVersion: security.istio.io/v1beta1
kind: RequestAuthentication
metadata:
  name: httpbin
  namespace: foo
spec:
  selector:
    matchLabels:
      app: httpbin
  jwtRules:
  - issuer: "issuer-foo"
    jwksUri: https://example.com/.well-known/jwks.json
```

Service Mesh provides two creation methods: wizard wizard and YAML. The specific steps to create through the wizard are as follows:

1. On the left navigation bar, click __Security__ -> __Request Authentication__ , and click the __Create__ button in the upper right corner.

    ![Create Request Authentication](https://docs.daocloud.io/daocloud-docs-images/docs/en/docs/mspider/user-guide/images/request01.png)

2. In the __Create Request Authentication__ interface, first perform the basic configuration and then click __Next__ .

    ![Basic Info](https://docs.daocloud.io/daocloud-docs-images/docs/en/docs/mspider/user-guide/images/request02.png)

3. After completing the authentication settings according to the screen prompts, click __OK__ , and the system will verify the configured information.

    ![Settings](https://docs.daocloud.io/daocloud-docs-images/docs/en/docs/mspider/user-guide/images/request03.png)

4. After the verification is passed, the screen prompts that the creation is successful.

    ![Successfully Created](https://docs.daocloud.io/daocloud-docs-images/docs/en/docs/mspider/user-guide/images/request04.png)

5. On the right side of the list, click __⋮__ in the operation column to perform more operations through the pop-up menu.

    ![Edit/Delete](https://docs.daocloud.io/daocloud-docs-images/docs/en/docs/mspider/user-guide/images/request05.png)

!!! note

    - For the configuration of specific parameters, please refer to [Security Governance Parameter Configuration](./params.md).
    - For a more intuitive operation demonstration, please refer to [Video Tutorial](../../../videos/mspider.md).
    - See [Service Mesh Identity and Authentication](./mtls.md).