Skip to content

Conversation

@eolivelli
Copy link
Contributor

Motivation:
Implement JWT validation, this way you don't need a user database, but the administrator can issue "tokens" that store a set of "claims".

Modifications:
Implement basic JWT validation, that works only with USERNAME/PASSWORD SASL authentication, the password is the JWT token.

@eolivelli
Copy link
Contributor Author

This is only POC at this stage, missing parts:

  • tests, tests, tests
  • CLI tools to issue tokens (like the "pulsar tokens" CLI tool)

@eolivelli
Copy link
Contributor Author

Instead of building another CLI for JWT I am going to try this:
https://github.com/mike-engel/jwt-cli

Then we can write instructions on the docs about how to create tokens using it, without reinventing the wheel and also not having to maintain such kind of security related tools

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant