Skip to content

Define an authentication mechanism based on HashiCorp Vault #255

Description

@mlycore

Development Task

The pisa proxy shall support an authentication mechanism based on HashiCorp Vault, the vault might on premise or hashicorp stuff.
For the moment we'd like to keep the keys in the vault and use paseto_token as authentication mechanism. https://github.com/rrrodzilla/rusty_paseto. The process will be the following:

  1. The user register in the vault is id:key in the vault, where key is a json { database_type:"", url:"", key:""}
  2. The user provide to Pisa the id.
  3. Pisa lookup to the vault microservice the id to fetch the key
  4. Add random data to the key
  5. Create a paseto token and give to the client, store inside a local cache (hash table).
  6. In each request proxy request the client add the paseto token.
    @mlycore feedbacks.

Thanks to @giorgiozoppi , this is an issue proposed by him.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions