Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[venus-auth] AuthClient接口可以不带token请求，存在安全隐患? #5507

Closed
1 of 11 tasks
diwufeiwen opened this issue Nov 23, 2022 · 1 comment
Closed
1 of 11 tasks

[venus-auth] AuthClient接口可以不带token请求，存在安全隐患? #5507

diwufeiwen opened this issue Nov 23, 2022 · 1 comment
Labels
C-duplicate Category: duplicate issue C-enhancement Category: feature enhancement

Comments

@diwufeiwen
Copy link
Contributor

链服务模块 / Chain Service Components

  • venus
  • venus-auth
  • venus-gateway
  • venus-messager
  • venus-miner
  • 文档 / docs

订单服务模块 / Deal Service Components

  • venus-market
  • 文档 / docs

算力服务模块 / Storage Power Service Components

  • venus-sector-manager
  • venus-worker
  • 文档 / docs

描述 / Description

func NewAuthClient(url string) (*AuthClient, error) {
client := resty.New().
SetHostURL(url).
SetHeader("Accept", "application/json")
return &AuthClient{cli: client}, nil
}
@diwufeiwen diwufeiwen added the C-enhancement Category: feature enhancement label Nov 23, 2022
@diwufeiwen diwufeiwen changed the title [venus-auth] AuthClient及接口可以不带token请求，存在安全隐患? [venus-auth] AuthClient接口可以不带token请求，存在安全隐患? Nov 23, 2022
@hunjixin hunjixin added the C-duplicate Category: duplicate issue label Nov 25, 2022
@hunjixin
Copy link
Contributor

前面有个venus接口保护的issue了

@hunjixin hunjixin mentioned this issue Nov 25, 2022
Closed
16 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
C-duplicate Category: duplicate issue C-enhancement Category: feature enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@diwufeiwen @hunjixin