NATS Account Server
NATS 2.0 will provide a multi-tenant security model that uses Accounts, configured by JSON Web Tokens, to configure server access. Rather than forcing administrators to hard code account information in the configuration, the NATS server can load account JWTs from a URL. In April 2019 I completed an initial, open-source implementation for this server called the nats-account-server
.
The account server is built in Go and uses HTTP as the primary API, with NATS notifications to notify NATS servers of updates. The server relies on a server template I have been creating at Synadia that has now gone through several iterations, first in an MQ-Series bridge to NATS and soon in a Kafka bridge.
More information on the account server is available in the repository including the documentation I wrote for users.