Client authentication for gRPC

This adds client authentication using TLS certificates when it is
enabled in gRPC. This just the basic feature right now. You either have
access or you do not.

Access is granted by putting the certificate digests of the authorized
users into the murmur.ini file.

1 files changed, 11 insertions, 0 deletions

diff --git a/src/murmur/MurmurGRPCImpl.h b/src/murmur/MurmurGRPCImpl.h
index 3592a62f2..a3074e9c9 100644
--- a/src/murmur/MurmurGRPCImpl.h
+++ b/src/murmur/MurmurGRPCImpl.h
@@ -22,8 +22,10 @@
 #include <atomic>
 
 #include <QMultiHash>
+#include <QSet>
 
 #include <grpc++/grpc++.h>
+#include <grpc++/security/auth_context.h>
 
 class RPCCall;
 
@@ -37,6 +39,15 @@ namespace MurmurRPC {
 	}
 }
 
+class MurmurRPCAuthenticator : public ::grpc_impl::AuthMetadataProcessor {
+	public:
+		MurmurRPCAuthenticator();
+		grpc::Status Process(const InputMetadata&, ::grpc::AuthContext*, OutputMetadata*, OutputMetadata*);
+		bool IsBlocking() const;
+	protected:
+		QSet<QByteArray> m_gRPCUsers;
+};
+
 class MurmurRPCImpl : public QThread {
 		Q_OBJECT;
 		std::unique_ptr<grpc::Server> m_server;