[GitHub] [apisix] xubinthor opened a new issue, #9181: Why execute the authentication plug-in first

["xubinthor (via GitHub)" <gi...@apache.org>]

xubinthor opened a new issue, #9181:
URL: https://github.com/apache/apisix/issues/9181

   ### Description
   
   I have added base-auth and ip-restriction plug-ins to the same route. Why does base-auth take effect first? Why is it not ip-restriction.The normal logic is ip-restriction takes effect first!
   
   `{
       "id": "453027477904687809",
       "create_time": 1679555018,
       "update_time": 1679985202,
       "uri": "/xubin/*",
       "name": "检查-xubin",
       "priority": 1,
       "methods": [
           "GET",
           "POST",
           "PUT",
           "DELETE",
           "PATCH",
           "HEAD",
           "OPTIONS",
           "CONNECT",
           "TRACE"
       ],
       "plugins": {
           "basic-auth": {
               "disable": false
           },
           "ip-restriction": {
               "disable": false,
               "whitelist": [
                   "113.74.26.106/24"
               ]
           },
           "proxy-rewrite": {
               "regex_uri": [
                   "^/xubin(/|$)(.*)",
                   "/$2"
               ]
           }
       },
       "upstream": {
           "nodes": [
               {
                   "host": "192.168.88.66",
                   "port": 9001,
                   "weight": 1
               }
           ],
           "retries": 15,
           "timeout": {
               "connect": 1,
               "send": 1,
               "read": 9
           },
           "type": "roundrobin",
           "scheme": "http",
           "pass_host": "pass",
           "keepalive_pool": {
               "idle_timeout": 60,
               "requests": 1000,
               "size": 320
           },
           "retry_timeout": 10
       },
       "labels": {
           "1": "1"
       },
       "status": 1
   }`
   
   ### Environment
   
   - APISIX version (run `apisix 2.15-alpine`):
   - Operating system (run `uname -a`):
   - OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
   - etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
   - APISIX Dashboard version, if relevant:
   - Plugin runner version, for issues related to plugin runners:
   - LuaRocks version, for installation issues (run `luarocks --version`):
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] soulbird commented on issue #9181: Why execute the authentication plug-in first

["soulbird (via GitHub)" <gi...@apache.org>]

soulbird commented on issue #9181:
URL: https://github.com/apache/apisix/issues/9181#issuecomment-1486542931

   same as #9183 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] soulbird closed issue #9181: Why execute the authentication plug-in first

["soulbird (via GitHub)" <gi...@apache.org>]

soulbird closed issue #9181: Why execute the authentication plug-in first
URL: https://github.com/apache/apisix/issues/9181


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org