[BUG] - 服务间认证，消费方多实例时，服务方认证鉴权会失败
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 45/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Quiet
- Tech stack
- java
- Domain
- authentication, authorization, backend
Research direction
Start by reading the token-generation logic in ConsumerTokenManager and the consumer public-key lookup in ProviderTokenManager. Reproduce the failure with multiple consumer instances on ServiceComb 3.3.0 and trace how applicationName, serviceName, and instance-specific key pairs are used. Done means every consumer instance can authenticate and pass provider authorization successfully.
Written by the indexing model from the issue text.
Description
Steps to Reproduce
1、ConsumerTokenManager 生成的逻辑中，token拼接使用的 applicationName 和 serviceName，但是用于签名的公私钥对是每个微服务实例生成的。
2、ProviderTokenManager 去取消费方微服务的公钥时，默认取的实例组中的 get(0) 对应的公钥，就会导致多消费实例时，其他消费方认证失败
Expected Behavior
No response
Servicecomb Version
3.3.0
Additional Context
No response
- Dominant language
- Java
- Stars
- 1.9k
- Forks
- 813
- Avg merge
- 8d 23h
- Merged PRs (30d)
- 1
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from apache/servicecomb-java-chassis
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
apache/servicecomb-java-chassis#5106 ·
-
question
Difficulty 5/5 Over a week Newbie friendliness 35/100
apache/servicecomb-java-chassis#5153 · 1 comment ·
-
question
Difficulty 4/5 3-5 days Newbie friendliness 25/100
apache/servicecomb-java-chassis#5146 ·
-
[FEATURE] - When will ServiceComb support Spring Boot 4.x, Spring Framework 7.x, and Jackson 3.x? Openenhancement
Difficulty 5/5 Over a week Newbie friendliness 25/100
apache/servicecomb-java-chassis#5145 ·
-
2.x bug
apache/servicecomb-java-chassis#5141 · 1 assignee ·
All issues in apache/servicecomb-java-chassis
Similar issues
-
area/plugin
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
kestra-io/plugin-kestra#190 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
google-ai-edge/LiteRT-LM#3739 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
integra-team-red/meet-map#249 ·
-
[Studio][Bug] Cancelled create-user dialog keeps the password and admin switch for the next attempt Open
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
apache/rocketmq-dashboard#5064 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
wso2/dpdp-accelerator#287 ·