bitflicker64 commented on PR #2962:
URL: https://github.com/apache/hugegraph/pull/2962#issuecomment-4042693507

   While working on this change, I noticed a couple of related behaviors that 
appear to predate this PR. The /v1/members/change endpoint relies on 
RestAuthentication, where Authentication.authenticate() currently validates 
only the username portion of Basic Auth. I also noticed that GrpcAuthentication 
does not appear to be wired into the gRPC server. These are outside the scope 
of this fix, but I thought it might be helpful to mention in case they are 
worth tracking separately.
   Also worth noting: IpAuthHandler.refresh() is wired through 
RaftEngine.changePeerList(), but PDService.updatePdRaft() calls 
node.changePeers() directly, so the refresh won't fire for that path.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to