Skip to content

Reusable vpn authkey - #207

Merged
majst01 merged 7 commits into
mainfrom
reusable-vpn-authkey
Oct 21, 2026
Merged

majst01 merged 7 commits into
mainfrom
reusable-vpn-authkey

Conversation

@majst01

@majst01 majst01 commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Description

This allows firewalls to authenticate multiple times in case of network errors as long as the authkey is not expired.

Used AI-Tools ✨

  • None used for generation

@majst01
majst01 requested a review from a team as a code owner October 21, 2026 11:49
@majst01 majst01 self-assigned this Oct 21, 2026
@majst01
majst01 requested review from Gerrit91 and mwennrich October 21, 2026 11:49
(buf.validate.field).string.max_len = 512
];
// Reusable, if set to true, the authkey can be used multiple times within the expiration window.
bool reusable = 5;

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we really need to add this to the API such that admins can also do this? Or can't this just be done internally for firewalls?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The internal call is:

func (v *vpn) CreateAuthKey(ctx context.Context, req *adminv2.VPNServiceAuthKeyRequest) (*adminv2.VPNServiceAuthKeyResponse, error) {

Why should we prevent that an admin can do this ?

@majst01
majst01 merged commit a62d29f into main Oct 21, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants