Skip to content

bugfix(CLI): if the user used default token and allow any IP to acces…#2244

Merged
moonming merged 7 commits intoapache:masterfrom
membphis:default-token-4
Sep 22, 2020
Merged

bugfix(CLI): if the user used default token and allow any IP to acces…#2244
moonming merged 7 commits intoapache:masterfrom
membphis:default-token-4

Conversation

@membphis
Copy link
Copy Markdown
Member

@membphis membphis commented Sep 17, 2020

…s Admin API,

will show a WARNING message.

What this PR does / why we need it:

if the user used the default token and allow any IP to access Admin API,
will show a WARNING message.

Pre-submission checklist:

  • Did you explain what problem does this PR solve? Or what new features have been added?
  • Have you added corresponding test cases?
  • Have you modified the corresponding document?
  • Is this PR backward compatible?

@membphis membphis added this to the 2.0 milestone Sep 17, 2020
bin/apisix Outdated
end


local is_checked_admin_key
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is_checked_admin_key is confusing, please take a better name.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

checked_admin_key, any better name suggestions?

@membphis membphis requested a review from moonming September 18, 2020 08:52
bin/apisix Outdated
Comment on lines +855 to +856
help:format([[WARNING: using fixed API token has security risk, ]]
.. [[please modify "admin_key" in conf/config.yaml.]]),
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@moonming moonming merged commit 6a1fe8a into apache:master Sep 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants