Implementation Details and Key Changes

1. New Authentication Package

   • Introduced auth package to hold types related to authentication
   • Added auth.Credentials interface to facilitate integration with external credential sources
   • Implemented basicAuth for username/password credentials

2. Streaming Credentials Provider

   • Introduced StreamingCredentialsProvider interface for dynamic credential updates
   • Added support for managed identity scenarios where credentials are retrieved from external sources
   • Implemented ReAuthCredentialsListener for handling credential updates
   • Added comprehensive test coverage for all authentication components

3. Documentation Updates

   • Added detailed Authentication section to README.md
   • Documented all credential provider types and their priority order:
     • Streaming Credentials Provider (highest priority)
     • Context-based Credentials Provider
     • Regular Credentials Provider
     • Username/Password fields (lowest priority)
   • Added example of Entra ID (Azure AD) authentication integration

4. Hooks System Enhancement

   • Refactored hooksMixin to propagate hooks to child connections
   • Hooks are now triggered prior to the initialization process
   • This change addresses reported issues with hook propagation

5. Testing

   • Added unit tests for all authentication components
   • Tested credential provider priority order
   • Tested streaming credentials provider with mock implementation
   • Tested error handling and edge cases

Security Considerations

Important Note: The hooksMixin refactor will now propagate hooks to child connections and trigger them prior to the initialization process. This change may have security implications, particularly regarding the visibility of authentication commands. For example, Redis MONITOR doesn't report AUTH commands, and this change could potentially expose sensitive authentication information through hooks. This should be carefully considered and potentially documented for users implementing custom hooks.

Related Issues

• Fixes issues with hook propagation to child connections
  • [Bug] The connection object returned by the redis instance call Conn() method loses the Hook #3267
  • Copy client hooks to child connections. #2680
• Improves documentation for authentication system