feat(coderd/x/nats): require client auth when ClusterAuthToken is set

This commit is contained in:
Jon Ayers
2026-05-27 19:31:18 +00:00
parent b035f7cfdc
commit 2e51c81194
+6
View File
@@ -34,6 +34,9 @@ func buildServerOptions(opts Options) (*natsserver.Options, error) {
sopts.DontListen = false
sopts.Host = "127.0.0.1"
sopts.Port = natsserver.RANDOM_PORT
if opts.ClusterAuthToken != "" {
sopts.Authorization = opts.ClusterAuthToken
}
if !opts.disableCluster {
clusterHost := opts.ClusterHost
@@ -94,6 +97,9 @@ func connectClient(ns *natsserver.Server, opts Options, handlers connHandlers, c
connOpts := []natsgo.Option{
natsgo.Name(connName),
}
if opts.ClusterAuthToken != "" {
connOpts = append(connOpts, natsgo.Token(opts.ClusterAuthToken))
}
if opts.ReconnectWait > 0 {
connOpts = append(connOpts, natsgo.ReconnectWait(opts.ReconnectWait))
}