My application needs to support authentication of 100’s of thousands of 
clients. I’m uncomfortable with having to manage this many client certs in a 
directory, as well as the cost in file operations to load these certs into my 
app.

A solution that would work for me is to be able to register an authentication 
hook function with zauth, which would call back to my code for authentication. 
I imagine a new message to the zauth agent, something like
“AUTH_HOOK”, passing a pointer to my function which would take the client key 
as a parameter, and return a bool (true if allowed, false if denied).

A typical implementation might be for my function to look up the key in, say, 
Redis, or some other database.

Thoughts? One consideration that immediately leaps out as a problem is 
cross-language support for such an API.

Thanks,

-chuck
_______________________________________________
zeromq-dev mailing list
[email protected]
http://lists.zeromq.org/mailman/listinfo/zeromq-dev

Reply via email to