Skip to content

fix: add TLS and authentication support to Redis connections - #709

Merged
ariskemper merged 2 commits into
mainfrom
sc/redis-tls-auth
Mar 23, 2026
Merged

fix: add TLS and authentication support to Redis connections#709
ariskemper merged 2 commits into
mainfrom
sc/redis-tls-auth

Conversation

@ariskemper

@ariskemper ariskemper commented Mar 23, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Adds TLS support: auto-detected from rediss:// URLs or explicit tls: true option
  • Adds auth support: password/username options + REDIS_PASSWORD/REDIS_USERNAME env vars
  • Warns when connecting without TLS in production
  • Updates RedisCacheOptions type with new fields

Part of supply chain security hardening (Phase 4).

Test plan

  • CI unit tests pass
  • CI integration tests pass

- Support rediss:// URLs for automatic TLS detection
- Add tls, password, username options to RedisClientOptions
- Support REDIS_PASSWORD and REDIS_USERNAME environment variables
- Log warning when connecting without TLS in production
- Add TLS/auth fields to RedisCacheOptions type
… env lookups

- RedisCache.ensureConnected() now passes tls, password, username to createClient
- Auto-detect TLS from rediss:// URLs in RedisCacheOptions
- Store env var lookups in variables to avoid duplicate getEnv() calls
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant