Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

How do you allow a driver using that exactly?


A db connection driver? You pass the JWT as the username/password which contains the information about your identity and is signed by the identity provider that the party you're authenticating to has been configured to trust.

Or, you use a broker like Vault to which you authenticate with that JWT, and which generates a just in time ephemeral username/password for your database, which gets rotated at some point.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: