You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Andy Tolbert (Jira)" <ji...@apache.org> on 2024/08/26 00:44:00 UTC

[jira] [Updated] (CASSANDRA-19859) gocql: Don't restrict server authenticator unless PasswordAuthentictor.AllowedAuthenticators is provided

     [ https://issues.apache.org/jira/browse/CASSANDRA-19859?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andy Tolbert updated CASSANDRA-19859:
-------------------------------------
    Source Control Link: https://github.com/apache/cassandra-gocql-driver/pull/1801

> gocql: Don't restrict server authenticator unless PasswordAuthentictor.AllowedAuthenticators is provided
> --------------------------------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-19859
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-19859
>             Project: Cassandra
>          Issue Type: Improvement
>          Components: Client/gocql-driver
>            Reporter: Andy Tolbert
>            Assignee: Andy Tolbert
>            Priority: Normal
>
> Currently gocql will only allow authenticating with authenticators defined in {{defaultApprovedAuthenticators}} in {{conn.go}}.
> There have been multiple occurrences of implementers needing to update this list, either when a vendor would like to add their authenticator, or a new authenticator being added, e.g.: [CASSANDRA-19858]
> examples:
> https://github.com/apache/cassandra-gocql-driver/pull/883
> https://github.com/apache/cassandra-gocql-driver/pull/1254
> https://github.com/apache/cassandra-gocql-driver/pull/1321
> https://github.com/apache/cassandra-gocql-driver/pull/1379
> I think it would probably reduce friction to just accept any authenticator provided by the server.  From what I know, other drivers behave in this way.
> If a user wanted to restrict this, they could use the existing configuration {{PasswordAuthenticator.AllowedAuthenticators}}, e.g.:
> {code}
> cluster.Authenticator = PasswordAuthenticator{
>     Username: x,
>     Password: x,
>     AllowedAuthenticators: []string { 
>         "myrandomauth",
>     }
> }
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org