mirror of
https://github.com/seaweedfs/seaweedfs.git
synced 2024-01-19 02:48:24 +00:00
Updated Security Overview (markdown)
parent
68342ec33a
commit
2ce504bb99
|
@ -24,13 +24,7 @@ All gRPC operations can optionally be secured via mutual TLS, by customizing the
|
||||||
|
|
||||||
# Securing Volume Servers
|
# Securing Volume Servers
|
||||||
|
|
||||||
There are 2 ways to change volume servers:
|
Besides gRPC mentioned above, volume servers can only be changed by file upload, update, and delete operations. Json Web Token (JWT) is used to authorize access for each file id.
|
||||||
1. Administrative operations via gRPC
|
|
||||||
1. File upload, update, and delete operations.
|
|
||||||
|
|
||||||
To control administrative operations, mutual TLS can be enabled for all gRPC calls.
|
|
||||||
|
|
||||||
To control file upload/update/delete operations, Json Web Token (JWT) is used to authorize access for each file id.
|
|
||||||
|
|
||||||
## JWT-based access control
|
## JWT-based access control
|
||||||
To enable JWT-based access control,
|
To enable JWT-based access control,
|
||||||
|
|
Loading…
Reference in a new issue