You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@shenyu.apache.org by "Aias00 (via GitHub)" <gi...@apache.org> on 2026/08/03 01:14:25 UTC
[I] [Task] — Sign algorithm version providers/extractors with zero test [shenyu]
Aias00 opened a new issue, #6814:
URL: https://github.com/apache/shenyu/issues/6814
- severity: High/Medium; files: `shenyu-plugin-security/shenyu-plugin-sign/.../sign/provider/VersionOneSignProvider.java:33`, `VersionTwoSignProvider.java:27`, `.../extractor/VersionOneExtractor.java`, `VersionTwoExtractor.java`
- description: v1/v2 signing algorithm providers and parameter extractors are untested (verified by content grep). `SignUtils` is exercised via `AppAuthMapperTest`, `ComposableSignService`/`DefaultSignProvider`/`DefaultExtractor` via `SignPluginTest` — but the version-specific providers/extractors are not.
- suggested_fix: Add provider/extractor tests covering match/no-match/edge cases.
---
_Identified during the 2026-08-02 deep re-scan; full list in [`docs/scan2-2026-08-02/06-medium-tiers.md`](docs/scan2-2026-08-02/06-medium-tiers.md)._
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shenyu.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Task] — Sign algorithm version providers/extractors with zero test [shenyu]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #6814:
URL: https://github.com/apache/shenyu/issues/6814#issuecomment-5161324069
👋 Hello @yuluo-yx
A new issue has been opened by @Aias00:
- **Title**: [Task] — Sign algorithm version providers/extractors with zero test
- **Link**: https://github.com/apache/shenyu/issues/6814
Please review when you have time. Thank you! 🙏
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shenyu.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Task] — Sign algorithm version providers/extractors with zero test [shenyu]
Posted by "yykaue (via GitHub)" <gi...@apache.org>.
yykaue commented on issue #6814:
URL: https://github.com/apache/shenyu/issues/6814#issuecomment-5367457700
/assign
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shenyu.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Task] — Sign algorithm version providers/extractors with zero test [shenyu]
Posted by "dengliming (via GitHub)" <gi...@apache.org>.
dengliming closed issue #6814: [Task] — Sign algorithm version providers/extractors with zero test
URL: https://github.com/apache/shenyu/issues/6814
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shenyu.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org