Authenticate client by certificate when get config

molotkov-and · Apr 9, 2024 · d33479a · d33479a
1 parent 3f80999
commit d33479a
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/ydb/core/client/server/msgbus_server_console.cpp b/ydb/core/client/server/msgbus_server_console.cpp
@@ -30,8 +30,15 @@ class TConsoleRequestActor : public TMessageBusSecureRequest<TMessageBusServerRe
         : TBase(msg)
         , Request(request)
     {
-        TBase::SetSecurityToken(request.GetSecurityToken());
+        const auto& token = request.GetSecurityToken();
+        const auto& clientCertificate = msg.FindClientCert();
+        if (!token.empty()) {
+            TBase::SetSecurityToken(token);
+        } else if (!clientCertificate.empty()){
+            TBase::SetClientCertificate(TString(clientCertificate.front()));
+        }
         TBase::SetRequireAdminAccess(true);
+
     }
 
     void Bootstrap(const TActorContext &ctx)