[GitHub] [incubator-shenyu] SaberSola opened a new issue #2724: [Question] Using the http registry is an insecure way. The interface for admin to register metadata does not have any security verification.

[GitBox <gi...@apache.org>]

SaberSola opened a new issue #2724:
URL: https://github.com/apache/incubator-shenyu/issues/2724


   ### Is there an existing issue for this?
   
   - [X] I have searched the existing issues
   
   ### Current Behavior
   
   The interface for admin to register metadata does not have any security verification.
   so Anyone can call the registration metadata interface through http requests, including some insecure external services
   
   ### Expected Behavior
   
   Add some login verifications to the registration metadata interface
   
   ### Steps To Reproduce
   
   _No response_
   
   ### Environment
   
   ```markdown
   ShenYu version(s):
   ```
   
   
   ### Debug logs
   
   _No response_
   
   ### Anything else?
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@shenyu.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-shenyu] yu199195 closed issue #2724: [security] Using the http registry is an insecure way. The interface for admin to register metadata does not have any security verification.

[GitBox <gi...@apache.org>]

yu199195 closed issue #2724:
URL: https://github.com/apache/incubator-shenyu/issues/2724


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@shenyu.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org