hengyuss opened a new pull request, #6408: URL: https://github.com/apache/shenyu/pull/6408
<!-- Describe your PR here; e.g. Fixes #issueNo --> <!-- Thank you for proposing a pull request. This template will guide you through the essential steps necessary for a pull request. --> decouple jwt signing key from user password hash add secret-key in application.yml to configure the key of jwt secret key, the code will generate a random string as secretKey if user doesn't configure it. i don't update JwtUtils.generateToken() and JwtUtils.verifyToken() . the two function receive the argument as secretKey and i think the behavior is correct. So that i change two place that invoke these two funcitons. Make sure that: - [x] You have read the [contribution guidelines](https://shenyu.apache.org/community/contributor-guide). - [x] You submit test cases (unit or integration tests) that back your changes. - [x] Your local test passed `./mvnw clean install -Dmaven.javadoc.skip=true`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
