Skip to content

Full support of custom auth methods #388

@nikita-v

Description

@nikita-v

Hi there!

It seems that Xandra does not fully support custom authentication mechanisms.
Specifically, it is not possible to connect to AWS Keyspaces when using temporary credentials (documentation).

The expected authentication flow in Keyspaces is:

  1. After receiving AUTHENTICATE, the client replies with an AUTH_RESPONSE containing the string "SigV4\00\00", indicating that temporary credentials will be used.
  2. Keyspaces responds with an AUTH_CHALLENGE carrying a random nonce.
  3. The client signs this nonce cryptographically and sends the result in a second AUTH_RESPONSE.
  4. Keyspaces validates the signature and replies with either AUTH_SUCCESS or ERROR.

Currently, Xandra does not appear to implement any handling of AUTH_CHALLENGE messages, which makes this authentication flow unsupported.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions