Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Define an authentication mechanism based on HashiCorp Vault #255

Open
mlycore opened this issue Aug 11, 2022 · 0 comments
Open

Define an authentication mechanism based on HashiCorp Vault #255

mlycore opened this issue Aug 11, 2022 · 0 comments

Comments

@mlycore
Copy link
Member

mlycore commented Aug 11, 2022

Development Task

The pisa proxy shall support an authentication mechanism based on HashiCorp Vault, the vault might on premise or hashicorp stuff.
For the moment we'd like to keep the keys in the vault and use paseto_token as authentication mechanism. https://github.com/rrrodzilla/rusty_paseto. The process will be the following:

  1. The user register in the vault is id:key in the vault, where key is a json { database_type:"", url:"", key:""}
  2. The user provide to Pisa the id.
  3. Pisa lookup to the vault microservice the id to fetch the key
  4. Add random data to the key
  5. Create a paseto token and give to the client, store inside a local cache (hash table).
  6. In each request proxy request the client add the paseto token.
    @mlycore feedbacks.

Thanks to @giorgiozoppi , this is an issue proposed by him.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant