gRPC Gateway Evaluation Project

This is a project to evaluate grpc-gateway.

Use Cases

• authentication
  • in gateway proto file, config endpoints with google.api.http
  • config all endpoints with or without authentication
  • in gateway's out-bound interceptor, check if there is any "authorization" in the metadata, perform corresponding authentication if so
  • upon runtime.NewServeMux(), forward necessary request info to the metadata to fullfill the authentication needs
• cookies or session handling
  • how to integrate with session library (e.g. scs)?
  • ???
• open API settings
  • e.g. "x-nullable", "x-go-custom-tag", "required", etc.
  • ???

Knowledge Base

• gRPC-Gateway
• Use gRPC interceptor for authorization with JWT
• grpc-auth-example
• Creating OpenSSL x509 certificates
• How to create an HTTPS certificate for localhost domains
• mTLS example
• How to secure gRPC connection with SSL/TLS in Go