Enhance Transform Rules with JWT claims

You can forward information from a JSON Web Token (JWT) to the origin in a header by creating Transform Rules using claims that Cloudflare has verified via the JSON Web Token.

Claims are available through the http.request.jwt.claims firewall fields.

For example, the following expression will extract the user claim from a token processed by the Token Configuration with TOKEN_CONFIGURATION_ID:

lookup_json_string(http.request.jwt.claims["<TOKEN_CONFIGURATION_ID>"][0], "claim_name")

​​Refer to Configure JWT Validation for more information about creating a Token Configuration.

​​ Create a Transform Rule

As an example, to send the header x-send-jwt-claim-user request header to the origin, you must create a Transform Rule:

1. Log in to the Cloudflare dashboard Open external link and select your account and domain.
2. Go to Rules > Transform Rules.
3. Select Modify Request Header > Create rule.
4. Enter a rule name and a filter expression, if applicable.
5. Choose Set dynamic.
6. Set the header name.
7. Set the value to lookup_json_string(http.request.jwt.claims["<TOKEN_CONFIGURATION_ID>"][0], "claim_name"), where <TOKEN_CONFIGURATION_ID> is your token configuration ID found in JWT Validation and claim_name is the JWT claim you want to add to the header.