Client SASL External

[Hussain1993]

Hi,

I have looked at all the examples and have found them really helpful. One thing I am finding difficult to understand is that I need my client to use SASL EXTERNAL mechanism and not sure how to go about doing that.

I am providing the client certificate and key as options to the connect method.

Thanks

[grs]

If you uncomment lines https://github.com/amqp/rhea/blob/master/examples/tls/tls_client.js#L35 and https://github.com/amqp/rhea/blob/master/examples/tls/tls_server.js#L33 that should enable external authentication for the simple tls example. Does that work for you?

[mattiaskjellsson]

In the typings are used, is the right place to update in the rhea/typings/connection.d.ts file Line 145

From:

interface TlsTransportOptions {
  /**
   * @property {string} transport - The transport option to request TLS connection. This is ignored if connection_details is set.
   */
   transport: "tls" | "ssl";
}

To:

interface TlsTransportOptions {
  /**
   * @property {string} transport - The transport option to request TLS connection. This is ignored if connection_details is set.
   */
   transport: "tls" | "ssl";

   enable_sasl_external?: boolean,
}

The right place to update, or is it logically more sane to add the enable_sasl_extrernal?: boolean, somewhere else?

[grs]

You can set the option on the container when using the typings. If a per connection option was needed in the typings I would probably add it to CommonConnectionOptions, even tjhough it is clearly only relevant when tls/ssl is used.

[mattiaskjellsson]

Setting
connection.container.options['enable_sasl_external'] = true;
solved the issue for me.

Thank you very much for your assistance. Greatly appreciated 🏅