You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2020/04/14 09:46:47 UTC

[GitHub] [incubator-apisix] stone4774 opened a new issue #1450: feature: Multiple accounts can be configured for one consumer

stone4774 opened a new issue #1450: feature:  Multiple accounts can be configured for one consumer
URL: https://github.com/apache/incubator-apisix/issues/1450
 
 
   At present, when creating a consumer, if you use the basic auth authentication method to configure multiple basic auth accounts, only the last one will be kept, and you want to configure multiple accounts at the same time
   
   Scenario: a consumer has multiple instances. If the account password of its basic auth is leaked, the account or password must be changed. In the process of changing, there will be a problem that the new or old account fails to authenticate for a short time
   
   If multiple accounts can take effect at the same time, the above problems will not occur during account replacement
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [incubator-apisix] moonming commented on issue #1450: feature: Multiple accounts can be configured for one consumer

Posted by GitBox <gi...@apache.org>.
moonming commented on issue #1450: feature:  Multiple accounts can be configured for one consumer
URL: https://github.com/apache/incubator-apisix/issues/1450#issuecomment-613850560
 
 
   > Scenario: a consumer has multiple instances. If the account password of its basic auth is leaked, the account or password must be changed. In the process of changing, there will be a problem that the new or old account fails to authenticate for a short time
   
   In the case of a password leak, old passwords shouldn't be allowed to be accessed, right?

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [incubator-apisix] membphis commented on issue #1450: feature: Multiple accounts can be configured for one consumer

Posted by GitBox <gi...@apache.org>.
membphis commented on issue #1450: feature:  Multiple accounts can be configured for one consumer
URL: https://github.com/apache/incubator-apisix/issues/1450#issuecomment-613899347
 
 
   > In the process of changing, there will be a problem that the new or old account fails to authenticate for a short time
   
   You can do this through a custom authentication plugin. Not all users need this feature.
   It maybe wrong for some users.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [incubator-apisix] stone4774 commented on issue #1450: feature: Multiple accounts can be configured for one consumer

Posted by GitBox <gi...@apache.org>.
stone4774 commented on issue #1450: feature:  Multiple accounts can be configured for one consumer
URL: https://github.com/apache/incubator-apisix/issues/1450#issuecomment-613862270
 
 
   Yes, so the password needs to be changed. The problem is how to ensure that 403 will not be returned in this process; 
     
    I create a consumer for each service to control its access to other services, so I must ensure that the request of the service is stable during password change;
   
   If a consumer can support multiple accounts at the same time, it means that I can configure a new account password for the service. After all instances of the service are switched, delete the old account password, so as to ensure the safe and smooth transition of the service

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [apisix] spacewander closed issue #1450: feature: Multiple accounts can be configured for one consumer

Posted by GitBox <gi...@apache.org>.
spacewander closed issue #1450:
URL: https://github.com/apache/apisix/issues/1450


   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org