dapr / dapr/components-contrib

bearer middleware need add whitelist field to bypass verifying some specific url like healthz

Open
#1,150 9 comments 0 reactions 1 assignee Claimed by @Taction View on GitHub
kind/enhancement pinned
Dominant language
Go
Stars
602
Forks
580
Avg merge
4d 9h
Merged PRs (30d)
6

Description

## issue description

if enable bearer http middleware, the consul name resolution cannot check the service healthz successfully

## feature request

If enable bearer http middleware, if using consul name resolution config, it will verify consul healthz http request too.
As access token may be changed from time to time, it is not easy to configure consul to carry a fixed access token,
in this scenario, it had better add 'whitelist' filed in bearer middleware component config, and adjust code to bypass verifying process when get the url in whitelist.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.