Today I learned about NATS, microservice API and security

Actual security, as in identity, is still a 3rd party thing, aka you still need a OIDC IDP (or oauth2 in the broadest sense or similar). All NATS security does is validate that the credentials you pass the a client are valid and enforce limits, if configured. The microservice API was necessary, since simple request/reply…

Read Article

Keycloak ED25519 is being worked on

If you’re like me and trying to use NATS Jetstream with JWT auth and Keycloak… Well right now you’re SOL, because Keycloak so far only supports RSA, HMAC and AES, and NATS requires ED25519 signatures. But a certain individual named tnorimat aka Takashi Norimatsu is apparently working on ED25519 support. EdDSA Keycloak Issue on Github…

Read Article

Replace text recursively

I’m in the process of moving from my gogs instance on git.icod.de to my gitea instance on code.icod.de In this process I’m migrating countless packages manually. It’s quite a lot of work. Often I need to replace “git.icod.de’ with ‘code.icod.de’ To do this on a Linux machine I use the following 1-liner:

In this…

Read Article