Skip to content

fix: jwt-auth error may leak secret#6846

Merged
spacewander merged 4 commits into
apache:masterfrom
bzp2010:fix-jwt-secret-leak
Apr 14, 2022
Merged

fix: jwt-auth error may leak secret#6846
spacewander merged 4 commits into
apache:masterfrom
bzp2010:fix-jwt-secret-leak

Conversation

@bzp2010

@bzp2010 bzp2010 commented Apr 14, 2022

Copy link
Copy Markdown
Contributor

Description

The jwt-auth plugin's response body may leak secrets in error message

Checklist

  • I have explained the need for this PR and the problem it solves
  • I have explained the changes or the new features added to this PR
  • I have added tests corresponding to this change
  • I have updated the documentation to reflect this change
  • I have verified that this change is backward compatible (If not, please discuss on the APISIX mailing list first)

@spacewander
spacewander merged commit 61a48a2 into apache:master Apr 14, 2022
spacewander pushed a commit to spacewander/incubator-apisix that referenced this pull request Apr 15, 2022
Liu-Junlin pushed a commit to Liu-Junlin/apisix that referenced this pull request May 20, 2022
spacewander pushed a commit to spacewander/incubator-apisix that referenced this pull request May 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants