Method ClusterAuthStreamHook

pkg/component/grpc.go:119–128

ClusterAuthStreamHook ensuring the caller of an RPC is part of the cluster. If a call can't be identified as coming from the cluster, it will be discarded.

()

// ClusterAuthStreamHook ensuring the caller of an RPC is part of the cluster.
// If a call can't be identified as coming from the cluster, it will be discarded.
func (c *Component) ClusterAuthStreamHook() hooks.StreamHandlerMiddleware {
	return func(hdl grpc.StreamHandler) grpc.StreamHandler {
		return func(srv any, stream grpc.ServerStream) error {
			wrapped := grpc_middleware.WrapServerStream(stream)
			ctx := c.cluster.WithVerifiedSource(stream.Context())
			wrapped.WrappedContext = ctx
			return hdl(srv, wrapped)
		}
	}
}