spec icon indicating copy to clipboard operation
spec copied to clipboard

How to handle Bearer Authentication using a JMS Header?

Open adamretter opened this issue 2 years ago • 7 comments

The securitySchemes mechanism of AsyncAPI 2.6.0 spec does not seem compatible with the idea of sending an Auth token (e.g. similar to Bearer Authentication) in a header when using the JMS protocol. The 2.6.0 version of the spec seems to restrict this to HTTP only for some reason.

I would like to be able to achieve something like:

securitySchemes:
  bearerAuthentication:
    type: apiKey
    in: header
    name: AuthenticationToken
    description: Bearer Authentication Token should be provided in the `AuthenticationToken` header.

Thoughts on how I can achieve this, or should I contribute an update to the spec?

adamretter avatar Apr 03 '23 12:04 adamretter

This issue has been automatically marked as stale because it has not had recent activity :sleeping:

It will be closed in 120 days if no further activity occurs. To unstale this issue, add a comment with a detailed explanation.

There can be many reasons why some specific issue has no activity. The most probable cause is lack of time, not lack of interest. AsyncAPI Initiative is a Linux Foundation project not owned by a single for-profit company. It is a community-driven initiative ruled under open governance model.

Let us figure out together how to push this issue forward. Connect with us through one of many communication channels we established here.

Thank you for your patience :heart:

github-actions[bot] avatar Aug 02 '23 00:08 github-actions[bot]

I would still like a response to this if possible?

adamretter avatar Aug 02 '23 06:08 adamretter

This issue has been automatically marked as stale because it has not had recent activity :sleeping:

It will be closed in 120 days if no further activity occurs. To unstale this issue, add a comment with a detailed explanation.

There can be many reasons why some specific issue has no activity. The most probable cause is lack of time, not lack of interest. AsyncAPI Initiative is a Linux Foundation project not owned by a single for-profit company. It is a community-driven initiative ruled under open governance model.

Let us figure out together how to push this issue forward. Connect with us through one of many communication channels we established here.

Thank you for your patience :heart:

github-actions[bot] avatar Dec 01 '23 00:12 github-actions[bot]

Can someone reply to this please?

adamretter avatar Dec 01 '23 12:12 adamretter

This issue has been automatically marked as stale because it has not had recent activity :sleeping:

It will be closed in 120 days if no further activity occurs. To unstale this issue, add a comment with a detailed explanation.

There can be many reasons why some specific issue has no activity. The most probable cause is lack of time, not lack of interest. AsyncAPI Initiative is a Linux Foundation project not owned by a single for-profit company. It is a community-driven initiative ruled under open governance model.

Let us figure out together how to push this issue forward. Connect with us through one of many communication channels we established here.

Thank you for your patience :heart:

github-actions[bot] avatar Mar 31 '24 00:03 github-actions[bot]

Id still like some feedback on this

adamretter avatar Mar 31 '24 08:03 adamretter