feat: implement TLS cert-to-user mapping via X500 DN matching

2026-02-23 00:55:29 -05:00
parent 1269ae8275
commit 1f13269447
5 changed files with 211 additions and 0 deletions
--- a/src/NATS.Server/NatsClient.cs
+++ b/src/NATS.Server/NatsClient.cs
@@ -367,6 +367,7 @@ public sealed class NatsClient : IDisposable
            {
                Opts = ClientOpts,
                Nonce = _nonce ?? [],
+                ClientCertificate = TlsState?.PeerCert,
            };

            var result = _authService.Authenticate(context);