...
- Create credential for each milvus instance and store encrypted password in etcd. Here we use bcrypt which implements Provos and Mazières's adaptive hashing algorithm.
- SDK client sends ciphertext password (using base64) when clients send ciphertext when connecting milvus service. The ciphertext is base64(<username>:<passwd>) and attached to the metadata with the key "authorization".
- Milvus proxy component intercepts the request and verify the credential.
- Credentials are cached locally on Proxy component.
...