feat(grpc): add JWT-based authentication for inter-component RPC (#4417)#4488

Open

sabarixr wants to merge 7 commits into

dragonflyoss:mainfrom

sabarixr:feature/grpc-jwt-auth

Commits on Feb 9, 2026

rpc/auth: add HS256 JWT utilities, gRPC server interceptors, and per-RPC credentials
sabarixr
committed
grpc(server): enforce JWT for Manager and Scheduler via unary/stream interceptors
sabarixr
committed
config(wiring): pass Manager/Scheduler auth.jwt.key into gRPC server via auth registry
sabarixr
committed
scheduler/config: add auth.jwt (realm, key, timeout, maxRefresh) with defaults and validation
sabarixr
committed
scheduler(client): attach JWT per-RPC credentials for Manager dials (iss=scheduler, aud=manager)
sabarixr
committed
build: add github.com/golang-jwt/jwt/v5 dependency
sabarixr
committed
fix(grpc/jwt): make JWT optional and address review feedback
sabarixr
committed