You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2021/05/11 08:21:10 UTC

[GitHub] [apisix] yxm-hs opened a new issue #4217: request help:APISIX 中hmac-auth插件他的认证级别只能到接口嘛

yxm-hs opened a new issue #4217:
URL: https://github.com/apache/apisix/issues/4217


   ### Issue description
   
   ### Environment
   
   * apisix version (cmd: `apisix version`):
   * OS (cmd: `uname -a`):
   * OpenResty / Nginx version (cmd: `nginx -V` or `openresty -V`):
   * etcd version, if have (cmd: run `curl http://127.0.0.1:9090/v1/server_info` to get the info from server-info API):
   * apisix-dashboard version, if have:
   * luarocks version, if the issue is about installation (cmd: `luarocks --version`):
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] yxm-hs closed issue #4217: request help:APISIX 中hmac-auth插件他的认证级别只能到接口嘛

Posted by GitBox <gi...@apache.org>.
yxm-hs closed issue #4217:
URL: https://github.com/apache/apisix/issues/4217


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] yxm-hs commented on issue #4217: request help:APISIX 中hmac-auth插件他的认证级别只能到接口嘛

Posted by GitBox <gi...@apache.org>.
yxm-hs commented on issue #4217:
URL: https://github.com/apache/apisix/issues/4217#issuecomment-839538159


   嗯呢，明白


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] Firstsawyou commented on issue #4217: request help:APISIX 中hmac-auth插件他的认证级别只能到接口嘛

Posted by GitBox <gi...@apache.org>.
Firstsawyou commented on issue #4217:
URL: https://github.com/apache/apisix/issues/4217#issuecomment-838088233


   The hmac-auth plugin is used for API interface authentication, that is, to enable it on routing. In what scenarios do you want to apply it?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] yxm-hs commented on issue #4217: request help:APISIX 中hmac-auth插件他的认证级别只能到接口嘛

Posted by GitBox <gi...@apache.org>.
yxm-hs commented on issue #4217:
URL: https://github.com/apache/apisix/issues/4217#issuecomment-838196445


   在一个consumer上开启并配置hmac-auth插件，route上开启hmac-auth插件，使用该consumer的信息及接口的信息生成密钥，这个密钥只能访问服务下用于生成密钥信息的接口，如果要访问其他接口，是不是他们都得去生成密钥，再访问。可以一个生成的密钥用于多个接口的调用嘛


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] Firstsawyou commented on issue #4217: request help:APISIX 中hmac-auth插件他的认证级别只能到接口嘛

Posted by GitBox <gi...@apache.org>.
Firstsawyou commented on issue #4217:
URL: https://github.com/apache/apisix/issues/4217#issuecomment-839486845


   According to the formula of the signature string, different API interfaces need to use different parameters such as `URI`. Therefore, one key cannot be used to call multiple interfaces. 
   `signing_string = HTTP Method + \n + HTTP URI + \n + canonical_query_string + \n + access_key + \n + Date + \n + signed_headers_string`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] yxm-hs commented on issue #4217: request help:APISIX 中hmac-auth插件他的认证级别只能到接口嘛

Posted by GitBox <gi...@apache.org>.
yxm-hs commented on issue #4217:
URL: https://github.com/apache/apisix/issues/4217#issuecomment-838105212


   使用hmac-auth鉴权方式，只能一个接口对应一个密钥信息嘛
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [apisix] Firstsawyou commented on issue #4217: request help:APISIX 中hmac-auth插件他的认证级别只能到接口嘛

Posted by GitBox <gi...@apache.org>.
Firstsawyou commented on issue #4217:
URL: https://github.com/apache/apisix/issues/4217#issuecomment-838178035


   > 使用hmac-auth鉴权方式，只能一个接口对应一个密钥信息嘛
   
   No, after the hmac-auth plugin is enabled on a route, it will match the hmac-auth plugin information configured on the consumer, and you can configure multiple hmac-auth plugins on the consumer.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org