search

solacecommunity / solace-prometheus-exporter

Prometheus Solace Exporter
MIT License
25 stars 23 forks source link

[Feature]: Support for OAuth authentication #70

Open pascalre opened 4 months ago

pascalre commented 4 months ago

Feature Description

Currently the solace-prometheus-exporter does only support basic auth. OAuth could be used as a more secure way of authentication.

Use Case

Basic Authentication sends the username and password with each request in plain text, which can be intercepted and compromised. OAuth, on the other hand, uses tokens and cryptographic signatures, reducing the risk of exposing credentials.

Proposed Solution

No response

GreenRover commented 4 months ago

You are talking about the Authentifikation of exporter against the broker? I dont have access to an broker that supports oAuth.

If you require this feature, you have to implement that on your own.

PS i hope you use semp over https to protect your basic auth credentials.

pascalre commented 4 months ago

Exactly, authentication against the PubSub+ Event Broker. I am not experienced in Go, but I may give it a try at some point.

Mrc0113 commented 4 months ago

Awesome @pascalre, if you get stuck feel free to start a discussion over at Solace Community.

Unfortunately our SEMP docs don't yet do this, but our Solace Cloud API docs let you copy code in different languages and uses oauth tokens so maybe you can look at the Golang example (choose language at the top right) over here as a starting point: https://api.solace.dev/cloud/reference/getapplicationdomains