cosmo icon indicating copy to clipboard operation
cosmo copied to clipboard

Support JWT/NKeys authentication for nats EDFS

Open seancribbs opened this issue 7 months ago • 2 comments

Component(s)

router

Is your feature request related to a problem? Please describe.

We are intending to use NATS for event-driven federation subscriptions (EDFS), but the connector only supports token or username/password authentication.

Describe the solution you'd like

We would like to configure the router to use a .creds (JWT + seed pair) file from the local filesystem to authenticate to our NATS cluster which is being administered using the operator/account/user hierarchy.

Describe alternatives you've considered

We could enable token or username/password authentication but this would require us to reload the router and NATS cluster anytime the credentials need to be rotated, whereas the JWT solution allows us to more dynamically create and revoke credentials.

Additional context

Relevant NATS documentation: https://docs.nats.io/running-a-nats-service/configuration/securing_nats/auth_intro/jwt

seancribbs avatar Apr 04 '25 20:04 seancribbs

WunderGraph commits fully to Open Source and we want to make sure that we can help you as fast as possible. The roadmap is driven by our customers and we have to prioritize issues that are important to them. You can influence the priority by becoming a customer. Please contact us here.

github-actions[bot] avatar Apr 04 '25 20:04 github-actions[bot]

Hi @seancribbs, thanks for your contribution. We'll look into it and come back.

StarpTech avatar Apr 08 '25 09:04 StarpTech