Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

uberware / sqi Public

Notifications You must be signed in to change notification settings
Fork 0
Star 34

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

feat!: opt-in broker authentication and per-worker transport identity - #126

#126

Merged

uberware merged 64 commits into

mainuberware/sqi:mainfrom

feat/broker-authuberware/sqi:feat/broker-authCopy head branch name to clipboard

Aug 21, 2026

Conversation Commits64 (64)Checks Files changed

Merged

feat!: opt-in broker authentication and per-worker transport identity#126
uberware merged 64 commits into
mainfrom
feat/broker-auth

Commits

Commits on Aug 21, 2026

feat(server): warn when the NATS broker is unauthenticated and non-loopback
uberware
committed
b1a5e9b
feat(config): add opt-in nats.auth broker authentication settings
uberware
committed
d33bbe5
docs: describe nats.auth behavior as shipped rather than mid-branch
uberware
committed
f630f28
feat(store): add worker credential and join token persistence
uberware
committed
a2d7159
feat(brokerauth): add nkey, permission and join-token primitives
uberware
committed
e336720
docs: distinguish the golangci-lint version floor from the CI pin
uberware
committed
a16024d
fix(brokerauth): enforce 0600 on an existing seed file and cover key validation
uberware
committed
dbea10e
feat(bus): authorize broker connections with per-worker nkeys
uberware
committed
c9426af
feat(bus)!: carry worker identity in every worker-to-server subject
uberware
committed
003b8ab
test(bus): pin subject construction against the worker permission grants
uberware
committed
48ca042
feat(scheduler): reject worker messages whose subject identity does not match the task owner
uberware
committed
0860d86
fix(scheduler): bind a log chunk to its own task, not just its worker
uberware
committed
81f0594
feat(worker): load or enroll an nkey credential before connecting to the broker
uberware
committed
71693d2
fix(worker): name the cause when the broker rejects a credential mid-run
uberware
committed
0df8aef
feat(cli): add worker enrolment, revocation and keygen subcommands
uberware
committed
bcafcbd
fix(store): scope worker credential uniqueness to active rows so keys can rotate
uberware
committed
b2577af
fix(store): make credential lookup and revocation unambiguous after rotation
uberware
committed
0e9f428
test(store): restore credential uniqueness and rotation coverage
uberware
committed
5dc9da9
docs(store): describe credential test invariants without process references
uberware
committed
3b7a389
feat(api): add worker enrolment and join-token endpoints behind workers.enroll
uberware
committed
a02faf0
fix(server): wire broker auth configuration into the REST enrollment surface
uberware
committed
a0e6c40
feat(server): disconnect and reclaim from a worker whose credential is revoked
uberware
committed
85aec01
fix(server): reload broker credentials on enrollment and serialize reloads
uberware
committed
7a2f58c
docs: document broker authentication, enrollment and the auth-off asymmetry
uberware
committed
bc0d44c
test: cover the default-config path and both broker-auth modes end to end
uberware
committed
957593c
fix(brokerauth): confine each worker's reply inbox to its own subject prefix
uberware
committed
1fa2687
fix(store): redeem a worker join token in one atomic claim
uberware
committed
7fa6f50
fix(cli): warn that an offline worker enrollment needs a server restart
uberware
committed
54aada7
docs: state offline enrollment, synchronous revocation and the auth-off availability risk
uberware
committed
0330f1f
chore: correct stale comments and drop the unused broker ServerSeed accessor
uberware
committed
178e0a6
fix(api): reject a worker id that is not a valid subject token at enrollment
uberware
committed
fbff686
docs(scheduler): name the subject shape that actually reaches the worker dispatch default
uberware
committed
5b560a2
fix(api): revoke a worker's broker credential when its record is deleted
uberware
committed
ad9ac3c
fix(bus): skip a worker credential whose public key is not a valid nkey
uberware
committed
997a3d9
fix(store): touch a worker credential on registration and redeem join tokens atomically
uberware
committed
c10634a
fix(api): cut broker access before deleting a worker record
uberware
committed
80bec7a
fix(brokerauth): write the worker seed file atomically
uberware
committed
2611b11
fix(worker): reject a queue id that is not a valid subject token at load
uberware
committed
09d1a0f
fix(cli): note the running-server restart requirement in keygen output
uberware
committed
478c130
ci(integration): run the whole test/integration suite, not three named tests
uberware
committed
9242d3f
fix(brokerauth): document SaveSeed's directory-permission requirement and fix two test defects
uberware
committed
b8e7961
docs: correct protocol channel count, transport, and worker-credential caller claims; tidy two tests
uberware
committed
5840950
ci: give the integration suite an explicit timeout above container startup
uberware
committed
dfdb1f0
refactor(brokerauth): move worker join-token generation into a server-only jointoken package built on the shared password primitives
uberware
committed
b576129
perf(scheduler): cache task-attempt ownership so log ingest stops re-reading the store per chunk
uberware
committed
716a03f
refactor(scheduler): extract shared discard-and-ack helpers for unexpected subjects and payload/subject identity mismatches
uberware
committed
3f68624
refactor(brokerauth): share the nkey signing option between the broker's admin connection and the worker client
uberware
committed
b1dd0ac
refactor(worker): derive the default nkey seed filename from internal/worker/config in keygen
uberware
committed
d846d19
fix(scheduler): evict stale attempt-cache entries on log-write failure and usage-claim deferral
uberware
committed
efd2190
test(scheduler): cover attempt-cache eviction on deletion, retry, and terminal status
uberware
committed
7357d3e
docs(auth): fix credential-file, keygen, and enrollment ordering claims in broker-auth docs
uberware
committed
3a5f83c
docs(api): correct worker-enrollment OpenAPI responses and REST permission docs
uberware
committed
547b7e0
docs(operations): document the sqi-server worker CLI family and its --db caveat
uberware
committed
c073a1b
docs(development): note the migration step and per-aggregate fake layout for new endpoints
uberware
committed
c3c27db
fix(cmd/sqi-server): resolve db path through config and require it exist for backup and worker
uberware
committed
0ede116
fix(cmd/sqi-worker): make keygen read worker config and report new vs existing worker id
uberware
committed
157281c
fix(scripts): create the database before minting a smoke-test join token
uberware
committed
c2fd48c
docs: describe the config-resolved db path and config-aware keygen
uberware
committed
00fbc7d
fix(config): expose provenance for config-decided values via LoadWithSources
uberware
committed
a05594f
fix(cmd/sqi-server): use config provenance, add schema check, and be lenient without -c
uberware
committed
92442be
fix(cmd/sqi-worker): use config provenance for keygen and make its tests hermetic
uberware
committed
519d35c
docs: correct stale keygen and backup claims flagged in review
uberware
committed
255523a
fix(scripts): exercise config-resolved db path in smoke's broker-auth mode
uberware
committed
dabe9f2
chore: render the breaking-change description in the generated changelog
uberware
committed
47aec82

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.