/wsrpc is assumed to be client-cert protected. Currently the "username" we log for those requests is "rpc", but it would be nice to use this as the default, but if a client cert exists with a non-empty CN then we'd use that as the username.
This currently only matters for logging, but this will be relevant when we expose different authentication and possibly restriction methods.
EliAndrewC
commented
8 years ago
/wsrpc is assumed to be client-cert protected. Currently the "username" we log for those requests is "rpc", but it would be nice to use this as the default, but if a client cert exists with a non-empty CN then we'd use that as the username.
This currently only matters for logging, but this will be relevant when we expose different authentication and possibly restriction methods.