aboutsummaryrefslogtreecommitdiffhomepage
path: root/doc/server_side_auth.md
diff options
context:
space:
mode:
authorGravatar Jan Tattermusch <jtattermusch@google.com>2017-04-18 12:31:49 +0200
committerGravatar Jan Tattermusch <jtattermusch@google.com>2017-04-18 12:31:49 +0200
commita22a19fd64fdf4c5c2a26f8989e86907b9e219af (patch)
treeefc751bc7d73b9eecb83551e4089df4643c52f29 /doc/server_side_auth.md
parentdd109da28038eb7b2b96a5fb6edcb4be33d6e13d (diff)
fix markdown
Diffstat (limited to 'doc/server_side_auth.md')
-rw-r--r--doc/server_side_auth.md4
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/server_side_auth.md b/doc/server_side_auth.md
index 288c6e9cb3..d260237928 100644
--- a/doc/server_side_auth.md
+++ b/doc/server_side_auth.md
@@ -13,7 +13,7 @@ The contents of the *auth properties* are populated by an *auth interceptor*. Th
WARNING: AuthContext is the only reliable source of truth when it comes to authenticating RPCs. Using any other call/context properties for authentication purposes is wrong and inherently unsafe.
-####Example AuthContext contents
+#### Example AuthContext contents
For secure channel using mutual TLS authentication with both client and server certificates (test certificates from this repository are used).
@@ -45,7 +45,7 @@ gRPC comes with some basic "interceptors" already built-in.
WARNING: While there is a public API that allows anyone to write their own custom interceptor, please think twice before using it.
There are legitimate uses for custom interceptors but you should keep in mind that as auth interceptors essentially decide which RPCs are authenticated and which are not, their code is very sensitive from the security perspective and getting things wrong might have serious consequences. If unsure, we strongly recommend to rely on official & proven interceptors that come with gRPC.
-####Available auth interceptors
+#### Available auth interceptors
- TLS/SSL certificate authentication (built into gRPC's security layer, automatically used whenever you use a secure connection)
- (coming soon) JWT auth token authentication
- more will be added over time