From 6d084b3b2174e21e55daaa1a153c4560bf979560 Mon Sep 17 00:00:00 2001
From: Orne Brocaar <info@brocaar.com>
Date: Wed, 16 Apr 2025 10:55:08 +0100
Subject: [PATCH] Add option to pass auth. header to join-server.

---
 chirpstack/src/backend/joinserver.rs | 5 +++++
 chirpstack/src/cmd/configfile.rs     | 6 ++++++
 chirpstack/src/config.rs             | 1 +
 3 files changed, 12 insertions(+)

diff --git a/chirpstack/src/backend/joinserver.rs b/chirpstack/src/backend/joinserver.rs
index 2d6f5c3b..f53b8156 100644
--- a/chirpstack/src/backend/joinserver.rs
+++ b/chirpstack/src/backend/joinserver.rs
@@ -29,6 +29,11 @@ pub async fn setup() -> Result<()> {
             tls_key: js.tls_key.clone(),
             async_timeout: js.async_timeout,
             request_log_sender: stream::backend_interfaces::get_log_sender().await,
+            authorization: if js.authorization_header.is_empty() {
+                None
+            } else {
+                Some(js.authorization_header.clone())
+            },
             ..Default::default()
         })?;
 
diff --git a/chirpstack/src/cmd/configfile.rs b/chirpstack/src/cmd/configfile.rs
index 8198dd4d..a86fb477 100644
--- a/chirpstack/src/cmd/configfile.rs
+++ b/chirpstack/src/cmd/configfile.rs
@@ -797,6 +797,11 @@ pub fn run() {
     #   #
     #   # Set this to enable client-certificate authentication with the join-server.
     #   tls_key="/path/to/tls_key.pem"
+
+    #   # Authorization header.
+    #   #
+    #   # Optional value of the Authorization header, e.g. token or password.
+    #   authorization_header="Bearer sometoken"
     {{#each join_server.servers}}
 
     [[join_server.servers]]
@@ -807,6 +812,7 @@ pub fn run() {
       ca_cert="{{ this.ca_cert }}"
       tls_cert="{{ this.tls_cert }}"
       tls_key="{{ this.tls_key }}"
+      authorization_header="{{ this.authorization_header }}"
     {{/each}}
 
 
diff --git a/chirpstack/src/config.rs b/chirpstack/src/config.rs
index a35f36c9..6b2d8dfc 100644
--- a/chirpstack/src/config.rs
+++ b/chirpstack/src/config.rs
@@ -524,6 +524,7 @@ pub struct JoinServerServer {
     pub ca_cert: String,
     pub tls_cert: String,
     pub tls_key: String,
+    pub authorization_header: String,
 }
 
 #[derive(Serialize, Deserialize, Default, Clone)]