Skip to content

feat(auth): add mTLS client certificate support#694

Draft
jerzykrlk wants to merge 1 commit into
BLeeEZ:masterfrom
jerzykrlk:feature/mtls-support
Draft

feat(auth): add mTLS client certificate support#694
jerzykrlk wants to merge 1 commit into
BLeeEZ:masterfrom
jerzykrlk:feature/mtls-support

Conversation

@jerzykrlk
Copy link
Copy Markdown

Enable .p12/.pfx certificate import for mutual TLS authentication with reverse proxies like Cloudflare Access. Uses certificate only for initial handshake to obtain session cookie, then relies on cookie for all subsequent requests including streaming.

Enable .p12/.pfx certificate import for mutual TLS authentication with reverse proxies like Cloudflare Access. Uses certificate only for initial handshake to obtain session cookie, then relies on cookie for all subsequent requests including streaming.
@jerzykrlk
Copy link
Copy Markdown
Author

This PR implements #471 - client certificate
support for the Amperfy client, which provides extra security when exposing music
servers on a public address.

Note: The underlying streaming library doesn't support client certificates yet, so
this implements client certificate authentication during the login/authentication phase.

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants