Skip to content

security: Add version number to base64 form of join tokens #64885

@itsbilal

Description

@itsbilal

Join tokens are created by the create_join_token() SQL builtin and
returned as base64 encoded strings.

  • To account for any future
    modifications to the join token format, the marshalled form of it
    should have a version number in it at a fixed offset (ideally 0)
    in addition to all the existing fields. This will ease in any future
    updates to the join token format.
  • the base64 format can produce strings that start with a hyphen (-) and this confuses the command-line parser when pasted in argument position on the command line for cockroach connect join.

Stems from #60632.
Epic: CRDB-6663

Metadata

Metadata

Assignees

No one assigned

    Labels

    A-authenticationPertains to authn subsystemsC-enhancementSolution expected to add code/behavior + preserve backward-compat (pg compat issues are exception)good first issue

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions