Skip to content

Conversation

qzhello
Copy link
Contributor

@qzhello qzhello commented Jun 4, 2024

描述

  1. 由用户发起的请求默认使用的ckibana的restclient,该restclient实例初始化时,默认加载了application.yml中的metadata-config的headers配置,例如:Authorization
  2. kibana默认发过来的鉴权头名称是authorization,由于默认属性,所有请求都是用的该token,导致es认为是该配置的身份,而不是真实登陆的用户身份。

解决方式

将restclient的用途分离,默认不带headers。

#44

@qzhello qzhello changed the title fix: Split out  user restclient, remove default header #44 fix: Split out  user restclient, remove default header Jun 4, 2024
@qzhello qzhello merged commit 7e2e434 into TongchengOpenSource:main Jun 4, 2024
@qzhello qzhello mentioned this pull request Jun 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant