diff --git a/docs/sources/setup-grafana/configure-security/configure-authentication/jwt/index.md b/docs/sources/setup-grafana/configure-security/configure-authentication/jwt/index.md index 587f376b259..2bf57b16672 100644 --- a/docs/sources/setup-grafana/configure-security/configure-authentication/jwt/index.md +++ b/docs/sources/setup-grafana/configure-security/configure-authentication/jwt/index.md @@ -79,6 +79,8 @@ can use URL login instead. `url_login` allows grafana to search for a JWT in the URL query parameter `auth_token` and use it as the authentication token. +**Note**: You need to have enabled JWT before setting this setting see section Enabled JWT + > **Warning**: this can lead to JWTs being exposed in logs and possible session hijacking if the server is not > using HTTP over TLS.