Skip to content

Make handling asynchronous auth easier to handle #1618

Open
@weissi

Description

@weissi

Currently, auth is handled with Client/ServerInterceptors and that of course works. But this has a number of pitfalls:

Basically it's way too hard to get this right for something that many/most(?) people will need.

I think gRPC should provide a very straightforward async throws hook that gets to see the headers and is then allowed to mutate/accept/reject them. This is both important for clients (which may want to add a token) and servers (which may want to validate a token).

Related: #1619 / #1620 / #1181

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/enhancementImprovements to existing feature.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions