Skip to content

Conversation

@wensiet
Copy link

@wensiet wensiet commented Jan 14, 2026

Description & motivation 💭

This PR introduces static headers forwarding to gRPC temporal frontend.

Our scenario is:

  • custom authorizer & claim-mapper plugin for temporal server
  • TLS is provided by the infrastructure and cannot be configured
  • to authenticate request, we need custom header, like x-service-auth=some-token-here
  • it works with temporal-cli or SDK's, with grpc-meta, but UI only has forwarding headers, which is not suitable

To solve this issue, we introduce new env var: TEMPORAL_SERVER_STATIC_HEADERS. It is later converted to config field staticHeaders.

Format is: TEMPORAL_SERVER_STATIC_HEADERS="some-header=someval,another-header=someval"

Screenshots (if applicable) 📸

No ui components changed.

Design Considerations 🎨

No ui components changed.

Testing 🧪

Manually tested with temporal-frontend. Added unit tests to ensure logic is correct.

How was this tested 👻

  • Manual testing
  • E2E tests added
  • Unit tests added

Steps for others to test: 🚶🏽‍♂️🚶🏽‍♀️

Add staticHeaders to configs, example:

staticHeaders:
  authorization: some-tkn

Or use ENV var TEMPORAL_SERVER_STATIC_HEADERS="authorization=some-tkn"

Checklists

Draft Checklist

Merge Checklist

Issue(s) closed

Docs

Any docs updates needed?

Yes, UI startup docs.

@vercel
Copy link

vercel bot commented Jan 14, 2026

Someone is attempting to deploy a commit to the Temporal Team on Vercel.

A member of the Team first needs to authorize it.

@CLAassistant
Copy link

CLAassistant commented Jan 14, 2026

CLA assistant check
All committers have signed the CLA.

@wensiet wensiet marked this pull request as ready for review January 14, 2026 11:41
@wensiet wensiet requested a review from a team as a code owner January 14, 2026 11:41
@wensiet wensiet requested review from laurakwhit and removed request for a team January 14, 2026 11:41
@wensiet wensiet force-pushed the feat-add-static-headers-forward branch from 73bcb30 to 784f8c3 Compare January 16, 2026 06:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants