You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2020/07/24 15:34:21 UTC

[GitHub] [incubator-apisix] UnderTreeTech opened a new issue #1900: request help: signature plugin

UnderTreeTech opened a new issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900


   Hope apisix will add signature verify plugin


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-apisix] UnderTreeTech commented on issue #1900: request help: signature plugin

Posted by GitBox <gi...@apache.org>.
UnderTreeTech commented on issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900#issuecomment-663865547


   signature = md5(query_param+body+secret+timestamp+nonce)
   In p2p, 2c scenario, we should verify peer request is valid or malicious. Signature is a common way to guarantee request trustable. @moonming 


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-apisix] UnderTreeTech edited a comment on issue #1900: request help: signature plugin

Posted by GitBox <gi...@apache.org>.
UnderTreeTech edited a comment on issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900#issuecomment-664197701


   Yep, but less complicated, just md5 or sha1.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-apisix] moonming commented on issue #1900: request help: signature plugin

Posted by GitBox <gi...@apache.org>.
moonming commented on issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900#issuecomment-663858084


   @UnderTreeTech can you show me a example? I am not sure what signature plugin?


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-apisix] UnderTreeTech commented on issue #1900: request help: signature plugin

Posted by GitBox <gi...@apache.org>.
UnderTreeTech commented on issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900#issuecomment-664277899


   OK，I'll try. @moonming 


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-apisix] UnderTreeTech edited a comment on issue #1900: request help: signature plugin

Posted by GitBox <gi...@apache.org>.
UnderTreeTech edited a comment on issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900#issuecomment-663865547


   `signature = md5(query_param+body+secret+timestamp+nonce)`, like [wechat pay signature specification](https://pay.weixin.qq.com/wiki/doc/api/jsapi.php?chapter=4_3).
   In p2p, 2c scenario, we should verify peer request is valid or malicious. Signature is a common way to guarantee request trustable. @moonming 


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-apisix] UnderTreeTech commented on issue #1900: request help: signature plugin

Posted by GitBox <gi...@apache.org>.
UnderTreeTech commented on issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900#issuecomment-664197701


   Yep, but less complicated, maybe just md5 or sha1.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-apisix] moonming commented on issue #1900: request help: signature plugin

Posted by GitBox <gi...@apache.org>.
moonming commented on issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900#issuecomment-664195096


   @UnderTreeTech Is it same as https://github.com/apache/incubator-apisix/issues/1653?


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-apisix] moonming commented on issue #1900: request help: signature plugin

Posted by GitBox <gi...@apache.org>.
moonming commented on issue #1900:
URL: https://github.com/apache/incubator-apisix/issues/1900#issuecomment-664206001


   got it. @UnderTreeTech Do you have time to contribute to this plugin?


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org