Jwt authentication for callback channel

Rasa Open Source
1

Hello everyone,

we are using the callback channel to send messages from rasa to our backends-API when external events occur. Everything works quite fine so far, except that our API-path for the callbacks has to be unsecured. Is there a way to provide authentication (e.g. JWT) for the callback-posts from rasa -> backend?

For other channels (e.g. facebook) you can add authentication parameters, but I couldn’t find anything about credentials for the callback channel.

thanks in advance! Dennis

2

Securing the callback channel is currently not possible. Adding authentication to various input channels is an open issue: Secure API using a JWT instead of token auth · Issue #4379 · RasaHQ/rasa · GitHub

1 Like
3

Hi and thanks for the fast response. Good to hear that authentication is planned for the callback-API as well.

regards Dennis