Hi there!
It seems that Xandra does not fully support custom authentication mechanisms.
Specifically, it is not possible to connect to AWS Keyspaces when using temporary credentials (documentation).
The expected authentication flow in Keyspaces is:
- After receiving
AUTHENTICATE, the client replies with an AUTH_RESPONSE containing the string "SigV4\00\00", indicating that temporary credentials will be used.
- Keyspaces responds with an
AUTH_CHALLENGE carrying a random nonce.
- The client signs this nonce cryptographically and sends the result in a second
AUTH_RESPONSE.
- Keyspaces validates the signature and replies with either
AUTH_SUCCESS or ERROR.
Currently, Xandra does not appear to implement any handling of AUTH_CHALLENGE messages, which makes this authentication flow unsupported.
Hi there!
It seems that Xandra does not fully support custom authentication mechanisms.
Specifically, it is not possible to connect to AWS Keyspaces when using temporary credentials (documentation).
The expected authentication flow in Keyspaces is:
AUTHENTICATE, the client replies with anAUTH_RESPONSEcontaining the string"SigV4\00\00", indicating that temporary credentials will be used.AUTH_CHALLENGEcarrying a random nonce.AUTH_RESPONSE.AUTH_SUCCESSorERROR.Currently, Xandra does not appear to implement any handling of
AUTH_CHALLENGEmessages, which makes this authentication flow unsupported.