Skip to content

feat(auth): pass the outgoing a2a request to UpstreamAuth - #3178

Draft
codyhartsook wants to merge 1 commit into
kagent-dev:mainfrom
codyhartsook:codyhartsook/upstreamAuthMethod
Draft

codyhartsook wants to merge 1 commit into
kagent-dev:mainfrom
codyhartsook:codyhartsook/upstreamAuthMethod

Conversation

@codyhartsook

@codyhartsook codyhartsook commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Description

UpstreamAuth now receives the outgoing a2a request, so an AuthProvider can treat a message send differently from a read or a cancel. Providers read it with auth.UpstreamRequestFrom(r.Context()) and switch on its type, such as a2a.SendMessageRequest. The AuthProvider interface does not change.

Related Issues

None required.

Testing

go test -race ./core/pkg/auth/ ./core/internal/a2agateway/

TestRuntimeDialerRoutesUnaryAndStreamingCalls checks that UpstreamAuth sees each request in order: send, stream, subscribe, get and cancel.

Change Type

/kind new_feature

Changelog

AuthProvider implementations can now see which A2A request UpstreamAuth is authorizing, such as a message send or a task cancel.

Signed-off-by: Cody Hartsook <cody.hartsook@solo.io>
@github-actions github-actions Bot added enhancement New feature or request and removed enhancement New feature or request labels Oct 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant