We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
服务端版本:2.1.2 客户端版本:1.4.2 服务端配置如下: nacos.core.auth.enable.userAgentAuthWhite=false nacos.core.auth.server.identity.key=nacosKey nacos.core.auth.server.identity.value=****** nacos.core.auth.enabled=true 本地测试发现,配置开启认证后,客户端不配置账号密码任然可以注册服务实例,发现是由于过滤器顺序问题引起。 com.alibaba.nacos.naming.web.DistroFilter和com.alibaba.nacos.core.auth.AuthFilter顺序配置的都是6,如果AuthFilter在DistroFilter之前执行是没有问题的,反过来就是有问题,DistroFilter代码中会转发请求并携带认证header,这样请求就会通过。
The text was updated successfully, but these errors were encountered:
Fix alibaba#9861, auth check before distro filter.
501d403
Fix #9861, auth check before distro filter. (#9871)
fee349b
Successfully merging a pull request may close this issue.
服务端版本:2.1.2
客户端版本:1.4.2
服务端配置如下:
nacos.core.auth.enable.userAgentAuthWhite=false
nacos.core.auth.server.identity.key=nacosKey
nacos.core.auth.server.identity.value=******
nacos.core.auth.enabled=true
本地测试发现,配置开启认证后,客户端不配置账号密码任然可以注册服务实例,发现是由于过滤器顺序问题引起。
com.alibaba.nacos.naming.web.DistroFilter和com.alibaba.nacos.core.auth.AuthFilter顺序配置的都是6,如果AuthFilter在DistroFilter之前执行是没有问题的,反过来就是有问题,DistroFilter代码中会转发请求并携带认证header,这样请求就会通过。
The text was updated successfully, but these errors were encountered: