Struct IamGrpcServer

weed/server/filer_server_handlers_iam_grpc.go:24–28

IamGrpcServer implements the IAM gRPC service on the filer. Auth is opt-in: when jwt.filer_signing.key is set in security.toml the service requires a Bearer token in the "authorization" metadata signed with that key; when it is empty every RPC is accepted unauthenticated, matching the rest of Seawee

// the rest of SeaweedFS's gRPC surface. Operators who expose the filer gRPC
// port beyond a trusted network should configure the key.
type IamGrpcServer struct {
	iam_pb.UnimplementedSeaweedIdentityAccessManagementServer
	credentialManager *credential.CredentialManager
	adminSigningKey   security.SigningKey
}

// NewIamGrpcServer creates a new IAM gRPC server. If adminSigningKey is empty
// the service runs unauthenticated; otherwise every RPC requires a Bearer