cosmo
cosmo copied to clipboard
Support JWT/NKeys authentication for nats EDFS
Component(s)
router
Is your feature request related to a problem? Please describe.
We are intending to use NATS for event-driven federation subscriptions (EDFS), but the connector only supports token or username/password authentication.
Describe the solution you'd like
We would like to configure the router to use a .creds (JWT + seed pair) file from the local filesystem to authenticate to our NATS cluster which is being administered using the operator/account/user hierarchy.
Describe alternatives you've considered
We could enable token or username/password authentication but this would require us to reload the router and NATS cluster anytime the credentials need to be rotated, whereas the JWT solution allows us to more dynamically create and revoke credentials.
Additional context
Relevant NATS documentation: https://docs.nats.io/running-a-nats-service/configuration/securing_nats/auth_intro/jwt
WunderGraph commits fully to Open Source and we want to make sure that we can help you as fast as possible. The roadmap is driven by our customers and we have to prioritize issues that are important to them. You can influence the priority by becoming a customer. Please contact us here.
Hi @seancribbs, thanks for your contribution. We'll look into it and come back.