Connectum API Reference / @connectum/auth / createGatewayAuthInterceptor

Function: createGatewayAuthInterceptor()

createGatewayAuthInterceptor(options): Interceptor

Defined in: packages/auth/src/gateway-auth-interceptor.ts:92

Create a gateway authentication interceptor.

Reads pre-authenticated identity from gateway-injected headers. Trust is established by checking a designated header value against a list of expected values (shared secrets or trusted IP ranges).

Parameters

options

GatewayAuthInterceptorOptions

Gateway auth configuration

Returns

Interceptor

ConnectRPC interceptor

Example

const gatewayAuth = createGatewayAuthInterceptor({
  headerMapping: {
    subject: 'x-user-id',
    name: 'x-user-name',
    roles: 'x-user-roles',
  },
  trustSource: {
    header: 'x-gateway-secret',
    expectedValues: [process.env.GATEWAY_SECRET],
  },
});