hengyuss opened a new pull request, #6407:
URL: https://github.com/apache/shenyu/pull/6407
<!-- Describe your PR here; e.g. Fixes #issueNo -->
#6398
<!--
Thank you for proposing a pull request. This template will guide you through
the essential steps necessary for a pull request.
-->
decouple jwt signing key from user password hash,
add secret-key in application.yml to configure the key of jwt secret key,
the code will generate a random string as secretKey if user doesn't configure
it.
i don't update JwtUtils.generateToken() and JwtUtils.verifyToken() . the
two function receive the argument as secretKey and i think the behavior is
correct. So that i change two place that invoke these two funcitons.
Make sure that:
- [x] You have read the [contribution
guidelines](https://shenyu.apache.org/community/contributor-guide).
- [x] You submit test cases (unit or integration tests) that back your
changes.
- [x] Your local test passed `./mvnw clean install
-Dmaven.javadoc.skip=true`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
