Re: [I] bug: Consumer plugins and labels not updated on authenticated requests when using credentials [apisix]

[via GitHub]

guilhermevillote commented on issue #12393:
URL: https://github.com/apache/apisix/issues/12393#issuecomment-3032340039

   Hi @Baoyuantop,
   
   Thanks for the reply. I recorded a short 
[video](https://youtu.be/kI69Tkx4_WY) to help illustrate the issue. Please note 
that the problem does not occur on every request — it happens intermittently.
   
   Here are the files I used to reproduce the issue:
   
   ```yaml
   version: "3"
   
   services:
     apisix:
       image: docker.io/apache/apisix:${APISIX_IMAGE_TAG:-3.11.0-debian}
       restart: always
       volumes:
         - ./apisix_conf/config.yaml:/usr/local/apisix/conf/config.yaml:ro
         - ./custom-plugins:/opt/apisix/plugins:ro
       depends_on:
         - etcd
       ports:
         - "9180:9180/tcp" # admin api
         - "9080:9080/tcp" # http ingress
         - "9091:9091/tcp"
         - "9443:9443/tcp"
         - "9092:9092/tcp"
       networks:
         apisix:
   
     etcd:
       image: docker.io/bitnami/etcd:3.4.15
       restart: always
       # volumes:
       #   - etcd_data:/bitnami/etcd
       environment:
         ETCD_ENABLE_V2: "true"
         ALLOW_NONE_AUTHENTICATION: "yes"
         ETCD_ADVERTISE_CLIENT_URLS: "http://etcd:2379";
         ETCD_LISTEN_CLIENT_URLS: "http://0.0.0.0:2379";
       ports:
         - "2379:2379/tcp"
       networks:
         apisix:
   
     httpbin:
       image: kennethreitz/httpbin
       restart: always
       ports:
         - "1980:80"
       networks:
         apisix:
   
   networks:
     apisix:
       driver: bridge
   
   volumes:
     etcd_data:
       driver: local
   ```
   
   ```bash
   curl http://localhost:9180/apisix/admin/routes/1 \
   -H "X-API-KEY: edd1c9f034335f136f87ad84b625c8f1" -X PUT -d '
   {
       "uri": "/httpbin",
       "methods": ["GET"],
       "upstream": {
         "type": "roundrobin",
         "nodes": {
           "httpbin:80": 1
         }
       },
       "plugins": {
         "key-auth": {
           "header": "X-API-KEY"
         }
       }
   }'
   
   curl http://localhost:9180/apisix/admin/consumers \
   -H "X-API-KEY: edd1c9f034335f136f87ad84b625c8f1" -X PUT -d '
   {
       "username": "jack"
   }'
   
   
   curl http://localhost:9180/apisix/admin/consumers/jack/credentials/one \
   -H "X-API-KEY: edd1c9f034335f136f87ad84b625c8f1" -X PUT -d '
   {
       "plugins": {
         "key-auth": {
           "key": "auth-one"
         }
       }
   }'
   
   curl http://localhost:9080/httpbin 
   
   curl http://localhost:9080/httpbin \
   -H "X-API-KEY: auth-one"
   
   curl http://localhost:9180/apisix/admin/consumers \
   -H "X-API-KEY: edd1c9f034335f136f87ad84b625c8f1" -X PUT -d '
   {
       "username": "jack",
       "plugins": {
         "fault-injection": {
           "abort": {
               "http_status": 403,
               "body": "ABORTED"
           }
         }
       }
   }'
   
   curl http://localhost:9180/apisix/admin/consumers/jack/credentials/two \
   -H "X-API-KEY: edd1c9f034335f136f87ad84b625c8f1" -X PUT -d '
   {
       "plugins": {
         "key-auth": {
           "key": "auth-two"
         }
       }
   }'
   
   curl http://localhost:9080/httpbin \
   -H "X-API-KEY: auth-one"
   
   curl http://localhost:9080/httpbin \
   -H "X-API-KEY: auth-two"
   ```
   
   Let me know if you need anything else to investigate further.
   
   Thanks again!
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org