sudeephazra commented on PR #12293: URL: https://github.com/apache/seatunnel/pull/12293#issuecomment-6358754664
PR12293-F4 - Implemented with a host-trust limitation. normalizeAuthorityHost() requires HTTPS and a parsed hostname, rejects user information, paths other than /, queries, and fragments, and normalizes the trailing slash. tenant_id must be a GUID or DNS name before token URL construction. Validation failures become connector validation errors with option-name context. There is no destination-host allowlist: arbitrary syntactically valid HTTPS hosts remain accepted. The four references and PR description document that trusted operators must select the authority. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
