Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/docs/users/guides/methods_filtering.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ sidebar_position: 4
When running a Filecoin node, you might want to restrict the RPC methods that are available to the clients. This can be useful for security reasons, to limit the exposure of the node to the internet, or to reduce the load on the node by disabling unnecessary methods.

:::note
[JWT authentication](../knowledge_base/jwt_handling) is a different way to restrict access to the node. It allows you to authorize certain operations on the node using JWTs. However, JWT restrictions are hard-coded in the node and cannot be changed dynamically. If you want to make sure that a certain read-only method is not available to the clients, you can use the method filtering feature.
[JWT authentication](../reference/json-rpc/authentication) is a different way to restrict access to the node. It allows you to authorize certain operations on the node using JWTs. However, JWT restrictions are hard-coded in the node and cannot be changed dynamically. If you want to make sure that a certain read-only method is not available to the clients, you can use the method filtering feature.

The methods are first filtered by the method filtering feature, and then the JWT authentication is applied. If a method is disallowed by the method filtering, the JWT token will not be checked for this method.
:::
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
---
title: JWT Authentication
title: Authentication
sidebar_position: 1
---

# JWT Authentication :key:
Expand Down
2 changes: 1 addition & 1 deletion docs/docs/users/reference/json-rpc/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,6 @@ Access control is implemented for certain methods. Levels of access include:
- Write
- Admin

Authentication is performed via [JWT Tokens](../../knowledge_base/jwt_handling). When starting Forest use `--save-token <FILE>` to store an `Admin` token,
Authentication is performed via [JWT Tokens](./authentication). When starting Forest use `--save-token <FILE>` to store an `Admin` token,
otherwise the token will be printed in the logs during startup. With this token you can call the methods `AuthNew`
to generate additional tokens as needed.
Loading