[GH-ISSUE #4950] [Feature Request] Use public/private keys instead of symmetric tokens for authentication

gitea-mirror commented

2026-05-05 14:29:24 -06:00

Owner

Copy link

Originally created by @ImranR98 on GitHub (Aug 23, 2025).
Original GitHub issue: https://github.com/fatedier/frp/issues/4950

Describe the feature request

Currently, the frps and frpc both need to use the same token to talk to each other. This increases the risk of MITM attacks. It would be nice if each side could have its own public/private key pair for mutual auth.

Describe alternatives you've considered

No alternatives.

Affected area

Docs
Installation
Performance and Scalability
Security
User Experience
Test and Release
Developer Infrastructure
Client Plugin
Server Plugin
Extensions
Others

Originally created by @ImranR98 on GitHub (Aug 23, 2025). Original GitHub issue: https://github.com/fatedier/frp/issues/4950 ### Describe the feature request Currently, the `frps` and `frpc` both need to use the same token to talk to each other. This increases the risk of MITM attacks. It would be nice if each side could have its own public/private key pair for mutual auth. ### Describe alternatives you've considered No alternatives. ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [x] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [x] Client Plugin - [x] Server Plugin - [ ] Extensions - [ ] Others

gitea-mirror closed this issue

2026-05-05 14:29:25 -06:00

gitea-mirror commented

2026-05-05 14:29:26 -06:00

Author

Owner

Copy link

@fatedier commented on GitHub (Aug 25, 2025):

https://github.com/fatedier/frp?tab=readme-ov-file#tls
You can take a look at the document here.

@fatedier commented on GitHub (Aug 25, 2025): https://github.com/fatedier/frp?tab=readme-ov-file#tls You can take a look at the document here.

gitea-mirror commented

2026-05-05 14:29:27 -06:00

Author

Owner

Copy link

@ImranR98 commented on GitHub (Aug 25, 2025):

Thanks, I didn't realize this was already possible (it wasn't the last time I checked but that was a long time ago). Should have checked more thoroughly again, sorry.

@ImranR98 commented on GitHub (Aug 25, 2025): Thanks, I didn't realize this was already possible (it wasn't the last time I checked but that was a long time ago). Should have checked more thoroughly again, sorry.

gitea-mirror commented

2026-05-05 14:29:28 -06:00

Author

Owner

Copy link

@ImranR98 commented on GitHub (Sep 14, 2025):

Is there a way to use this with https://github.com/gofrp/fp-multiuser? Couldn't find any docs for that.

@ImranR98 commented on GitHub (Sep 14, 2025): Is there a way to use this with https://github.com/gofrp/fp-multiuser? Couldn't find any docs for that.

gitea-mirror commented

2026-05-05 14:29:30 -06:00

Author

Owner

Copy link

@fatedier commented on GitHub (Sep 15, 2025):

These two are unrelated; just configure each one according to its respective documentation.

@fatedier commented on GitHub (Sep 15, 2025): These two are unrelated; just configure each one according to its respective documentation.

No Branch/Tag specified