dromara / dromara/forest

BasicAuth在无密码情况下,无法验证的问题

Open
#151 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
1.9k
Forks
241
PR merge metrics
No merged PRs in 30d

Description

# 问题描述
使用sonarqube的token调用web api的时候,官方使用的是
```
token后面的冒号用于设置空密码
curl -u THIS_IS_MY_TOKEN: https://sonarqube.com/api/user_tokens/search
```
在使用`@BasicAuth` 时,空密码会被错误的设置成null

# 问题复现
```
@BasicAuth(username = "#{sonarqube.token}",password = "") // 代码一
@BasicAuth(username = "#{sonarqube.token}",password = "#{sonarqube.password}") //代码二

// yml
sonarqube:
token: xxxx
password: ""

```

使用网站工具解密结果
```
// @BasicAuth(username = "#{sonarqube.token}",password = "") 代码一,错误,最后实际请求的密码是null
username: xxxx
password: null

//@BasicAuth(username = "#{sonarqube.token}",password = "#{sonarqube.password}") 代码二,正确,最后实际请求的密码是空
username: xxxx
password:
```

# 使用版本
**v1.5.32**

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.