Connectum API Reference / @connectum/auth / createClientGatewayInterceptor

Function: createClientGatewayInterceptor()

createClientGatewayInterceptor(options): Interceptor

Defined in: packages/auth/src/client-gateway-interceptor.ts:52

Create a client interceptor that attaches gateway auth headers to outgoing requests.

Sets the following headers for service-to-service communication:

• x-gateway-secret — shared secret for trust verification
• x-auth-subject — authenticated subject identifier
• x-auth-roles — JSON-encoded roles array (optional)

These headers are consumed by the server-side createGatewayAuthInterceptor to reconstruct the auth context without re-authentication.

Parameters

options

ClientGatewayInterceptorOptions

Gateway auth configuration

Returns

Interceptor

A ConnectRPC client Interceptor

Example

import { createClientGatewayInterceptor } from '@connectum/auth';
import { createConnectTransport } from '@connectrpc/connect-node';

const transport = createConnectTransport({
    baseUrl: 'http://internal-service:5000',
    interceptors: [createClientGatewayInterceptor({
        secret: process.env.GATEWAY_SECRET!,
        subject: 'order-service',
        roles: ['service', 'order-writer'],
    })],
});