grpc-ecosystem/grpc-gateway

docs: provide example of mutual TLS authentication

Open

#350 建立於 2017年4月5日

在 GitHub 查看
 (7 留言) (0 反應) (0 負責人)Go (16,971 star) (2,250 fork)batch import
documentationhelp wanted

描述

Hi,

is there a way to do mutual TLS authentication between the client and grpc-gateway? I'd like to check if the client's public key is in a list or the certificate is signed by a specific CA and copy the client's name or the certificate's common name to grpc metadata. Sounds like a use case for some middleware, right?

Best, Malte

貢獻者指南

技術棧
gorest api
領域
backendapisecurity
議題類型
documentation
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
3
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
half day
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
stale
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
needs investigation
前置要求
gRPC fundamentalsGo programmingmTLS concepts
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
40
研究方向
First, review existing grpc gateway examples for authentication. Then, examine grpc go's mTLS support and how to plug middleware into grpc gateway. Finally, create a simple example showing client certificate validation and extraction of CN to gRPC metadata.
docs: provide example of mutual TLS authentication · grpc-ecosystem/grpc-gateway#350 | Good First Issue