Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make handling asynchronous auth easier to handle #1618

Open
weissi opened this issue Jun 22, 2023 · 0 comments
Open

Make handling asynchronous auth easier to handle #1618

weissi opened this issue Jun 22, 2023 · 0 comments

Comments

@weissi
Copy link
Contributor

weissi commented Jun 22, 2023

Currently, auth is handled with Client/ServerInterceptors and that of course works. But this has a number of pitfalls:

Basically it's way too hard to get this right for something that many/most(?) people will need.

I think gRPC should provide a very straightforward async throws hook that gets to see the headers and is then allowed to mutate/accept/reject them. This is both important for clients (which may want to add a token) and servers (which may want to validate a token).

Related: #1619 / #1620 / #1181

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant