Please take a look 
at https://github.com/grpc/proposal/blob/master/A43-grpc-authorization-api.md 
and see if that addresses your questions.

On Wednesday, March 1, 2023 at 2:27:45 PM UTC-8 Eric Robins wrote:

> Forgive the question if it's already been asked.  I've been digging 
> through documentation on gRPC and how to secure it but I've been unable to 
> find anything at a very detailed level that explains what I guess I'd call 
> session management - the persistence of channels and underlying HTTP/2 
> streams between a client and server where both may have been previously 
> authenticated.
>
> Using gRPC, how does a server know that it is still talking to the same 
> client it authenticated previously?  In HTTP/1.1 session management is 
> achieved almost always through the use of cookies or other authorization 
> grants given to the client by the server that are represented back to the 
> server (in a header usually) every time a call is made during the active 
> session.  How does this work in gRPC?
>
> Thanks in advance.  Happy to go read more documentation if someone can 
> point me to it.
>
> Eric
>

-- 
You received this message because you are subscribed to the Google Groups 
"grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to grpc-io+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/grpc-io/5ef82106-6df0-4908-a565-b3d8ca37192fn%40googlegroups.com.

Reply via email to