ginuerzh 0ca1e7621a feat(handler): forward mTLS client cert identity to auth plugins ...

Extracts the verified mTLS peer certificate (CN, SANs, SHA-256
fingerprint) from the TLS connection in the HTTP handler after the
handshake completes, stores it in the request context, and forwards
it to both gRPC and HTTP auth plugins via new AuthenticateRequest
fields (client_cn, client_san, client_cert_fingerprint).

2026-07-04 17:30:36 +08:00

..

plugin

feat(handler): forward mTLS client cert identity to auth plugins

2026-07-04 17:30:36 +08:00

auth_test.go

feat(auth): add skipauth metadata option to bypass auth for whitelisted client IPs

2026-06-27 14:33:40 +08:00

auth.go

fix(auth): redisLoader copy-paste bug, httpLoader.Close leak, reload data wipe, silent parse errors

2026-05-22 22:35:55 +08:00

whitelist.go

feat(auth): add skipauth metadata option to bypass auth for whitelisted client IPs

2026-06-27 14:33:40 +08:00