Commit Graph

6 Commits

Author SHA1 Message Date
Derek Collison
1e15061400 Cleanup for some staticcheck warnings
Signed-off-by: Derek Collison <derek@nats.io>
2023-07-21 19:17:54 -07:00
Alberto Ricart
52b023d993 bumped to latest version of jwt branch
removed server_key as name/id are already the right values
2023-03-16 17:29:14 -05:00
aricart
769dd15f06 [CHANGE] simplify auth callout response to use headers and a regular user jwt 2023-02-20 09:45:58 -04:00
Neil
2f080ac185 removed vendor 2023-01-13 12:20:55 -04:00
Derek Collison
a63929c528 Add in account scoped auth error event. If external auth, supply reason from the callout service.
Signed-off-by: Derek Collison <derek@nats.io>
2023-01-02 17:18:45 -08:00
Derek Collison
2daf90493b Authentication and Authorization callouts for server configuration mode.
This adds the ability to augment or override the NATS auth system.

A server will send a signed request to $SYS.REQ.USER.AUTH on the specified account. The request will contain client information, all client options sent to the server, and optionally TLS information and client certificates.
The external auth service will respond with an empty message if not authorized, or a signed User JWT that the user will bind to.

The response can change the account the client will be bound to.

Signed-off-by: Derek Collison <derek@nats.io>
2022-12-28 10:32:45 -08:00