From c8c43b3dbea7ebac58fccee55fcf310cf79e1662 Mon Sep 17 00:00:00 2001 From: JacobBarthelmeh Date: Tue, 21 Jul 2026 09:46:41 -0600 Subject: [PATCH] add comments about WOLFHSM_CFG_ENABLE_AUTHENTICATION to wh_settings.h --- wolfhsm/wh_settings.h | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/wolfhsm/wh_settings.h b/wolfhsm/wh_settings.h index 1139fee9c..69911943a 100644 --- a/wolfhsm/wh_settings.h +++ b/wolfhsm/wh_settings.h @@ -75,6 +75,17 @@ * WOLFHSM_CFG_ENABLE_TIMEOUT - If defined, include client-side support for * blocking request timeouts * + * WOLFHSM_CFG_ENABLE_AUTHENTICATION - EXPERIMENTAL. If defined, include the + * Auth Manager (wh_auth*), which adds per-client user authentication and + * per-user authorization to the server. Clients log in with a credential + * (PIN or certificate) to establish a session, and the server checks the + * resulting per-user permissions (per message group/action, plus key ID + * access) before dispatching a request. Checks are only applied if the + * server is configured with an auth context; without one all requests are + * processed unchecked. The API and wire format are subject to change and + * are not covered by compatibility guarantees. + * Default: Not defined + * * WOLFHSM_CFG_NVM_OBJECT_COUNT - Number of objects in ram and disk directories * Default: 32 *