Merge pull request #796 from Dstack-TEE/feat/shared-api-auth

feat(auth): protect VMM with shared API authentication

Author: kvinwang

dstack/Cargo.lock

@@ -66,6 +66,7 @@ members = [
     "crates/dstack-cli",
     "crates/dstackup",
     "crates/dstack-auth",
+    "crates/api-auth",
     "crates/build-info",
 ]
 resolver = "2"
@@ -79,6 +80,7 @@ dstack-kms-rpc = { path = "kms/rpc" }
 dstack-guest-agent-rpc = { path = "guest-agent/rpc" }
 dstack-vmm-rpc = { path = "vmm/rpc" }
 dstack-cli-core = { path = "crates/dstack-cli-core" }
+dstack-api-auth = { path = "crates/api-auth" }
 dstack-build-info = { path = "crates/build-info" }
 cc-eventlog = { path = "cc-eventlog" }
 supervisor = { path = "supervisor" }
@@ -144,6 +146,7 @@ flate2 = "1.1"
 borsh = { version = "1.5.7", default-features = false, features = ["derive"] }
 bon = { version = "3.4.0", default-features = false }
 base64 = "0.22.1"
+bcrypt = "0.17.1"
 hex = { version = "0.4.3", default-features = false }
 hex_fmt = "0.3.0"
 hex-literal = "1.0.0"

dstack/Cargo.toml

@@ -0,0 +1,18 @@
+# SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network>
+#
+# SPDX-License-Identifier: Apache-2.0
+
+[package]
+name = "dstack-api-auth"
+version.workspace = true
+authors.workspace = true
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+base64.workspace = true
+bcrypt.workspace = true
+rocket.workspace = true
+sha2.workspace = true
+subtle.workspace = true

dstack/crates/api-auth/Cargo.toml

@@ -0,0 +1,31 @@
+<!--
+SPDX-FileCopyrightText: © 2026 Phala Network <dstack@phala.network>
+
+SPDX-License-Identifier: Apache-2.0
+-->
+
+# dstack-api-auth
+
+Shared authentication primitives for dstack HTTP and RPC administration APIs.
+
+HTTP integrations support:
+
+- `Authorization: Bearer <token>`;
+- the shared `X-Admin-Token` header used by Gateway and VMM;
+- `Authorization: Basic ...` backed by a bcrypt Apache htpasswd file;
+- optional GET-only `?token=` links for the Gateway and VMM dashboards.
+
+Generate a compatible password file with:
+
+```bash
+htpasswd -B -c /etc/dstack/admin.htpasswd admin
+```
+
+Gateway's existing token configuration and environment variables remain
+supported. VMM's existing `[auth] enabled` and `tokens` fields remain supported;
+when enabled, authentication now covers the complete externally listening
+Rocket server. The separate VMM host-vsock server is intentionally unaffected.
+
+KMS continues to accept the existing SHA-256 `admin_token_hash` and protobuf
+request token. Its comparison uses the constant-time verifier from this crate;
+the public KMS application APIs are not placed behind operator HTTP Basic auth.