You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@dubbo.apache.org by "lianzhanbiao (via GitHub)" <gi...@apache.org> on 2023/03/22 06:32:15 UTC
[GitHub] [dubbo-go] lianzhanbiao opened a new issue, #2257: 认证鉴权
lianzhanbiao opened a new issue, #2257:
URL: https://github.com/apache/dubbo-go/issues/2257
1、证书获取方式后续修改为远端获取，需要follow java。
2、提供服务调用鉴权模式修改的api。
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] yanyanran commented on issue #2257: Security 认证鉴权
Posted by "yanyanran (via GitHub)" <gi...@apache.org>.
yanyanran commented on issue #2257:
URL: https://github.com/apache/dubbo-go/issues/2257#issuecomment-1494011769
Hello, I would like to participate in this session, and I have submitted a proposal on the official website of GSOC.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] chickenlj commented on issue #2257: 认证鉴权
Posted by "chickenlj (via GitHub)" <gi...@apache.org>.
chickenlj commented on issue #2257:
URL: https://github.com/apache/dubbo-go/issues/2257#issuecomment-1480723667
@AlbumenJ We need a picture that can clearly show the basic architecture and workflow of this feature here.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] chickenlj commented on issue #2257: 认证鉴权
Posted by "chickenlj (via GitHub)" <gi...@apache.org>.
chickenlj commented on issue #2257:
URL: https://github.com/apache/dubbo-go/issues/2257#issuecomment-1480722405
Related documentation:
https://cn.dubbo.apache.org/zh-cn/overview/core-features/security/
https://cn.dubbo..org/zh-cn/overview/reference/proposals/admin/#1-dubbo-%E6%95%B4%E4%BD%93%E6%9E%B6%E6%9E%84
Authority server:
https://github.com/apache/dubbo-admin
cmd/authority
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] chickenlj commented on issue #2257: Security 认证鉴权
Posted by "chickenlj (via GitHub)" <gi...@apache.org>.
chickenlj commented on issue #2257:
URL: https://github.com/apache/dubbo-go/issues/2257#issuecomment-1482583600
As a very important feature of Dubbo3, Dubbo is trying to provide the ability to build a zero-trust microservice cluster.
Dubbo-go, as a data plane component that might be deployed in the cluster, should make sure it gives full support to the security mechanism. By checking the documentation or even the code, we find basic TLS has already been provided which is a good start, but there's still lots of work need to be done in order to meet the security requirements.
Here are some possible things that the framework needs to be done to work with the Dubbo security system.
* Automatic discovery of certificates
* Automatic rotation of certificates
* Authentication Policies
* Authorization Policies
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org