feat: implement TLS cert-to-user mapping via X500 DN matching

2026-02-23 00:55:29 -05:00
parent 1269ae8275
commit 1f13269447
5 changed files with 211 additions and 0 deletions
--- a/src/NATS.Server/Auth/IAuthenticator.cs
+++ b/src/NATS.Server/Auth/IAuthenticator.cs
@@ -1,3 +1,4 @@
+using System.Security.Cryptography.X509Certificates;
 using NATS.Server.Protocol;

 namespace NATS.Server.Auth;
@@ -11,4 +12,5 @@ public sealed class ClientAuthContext
 {
    public required ClientOptions Opts { get; init; }
    public required byte[] Nonce { get; init; }
+    public X509Certificate2? ClientCertificate { get; init; }
 }