Enable multiple authenticators to work simultaneously #271
Labels
large
Effort label
multitenancy
Getting Parsec to provide isolated key stores for multiple clients based on an identity mechanism
Currently only one authenticator is allowed to work in Parsec.
The reason is that the
OnDiskKeyInfoManager
stores theKeyTriple
toKeyInfo
mappings as a directory structure:If we were to add one more layer for
AuthType
, and then transform theKeyTriple
into aKeyFourtuple
, old mappings will not be compatible with new ones directly.That task is about making the necessary changes in Parsec for it to work with multiple authenticators securely. There are changes needed:
ManageKeyInfo
trait and thekey_info_managers
modulesProvide
trait and implementations to support passing, along theApplicationName
, theAuthType
as wellOne thing that could also be done is implement a new KeyInfo Manager that supports multiple authenticators and that supports it from start! That way the restriction will only apply to the old
OnDiskKeyInfoManager
.The text was updated successfully, but these errors were encountered: