Token Authorization
Config token based authorization in dubbo
Through the token authorization control center at the registry to decide whether to issue tokens to consumers, you can prevent consumers from bypassing the registry access provider, another through the registry can flexibly change the authorization without modification or upgrade provider
You can turn on token authentication globally:
<!--Random token , generated using a UUID-->
<dubbo:provider interface="com.foo.BarService" token="true" />
or
<!--Fixed token, equivalent to the password-->
<dubbo:provider interface="com.foo.BarService" token="123456" />
Of course can turn on token authentication at service level:
<!--Random token , generated using a UUID-->
<dubbo:service interface="com.foo.BarService" token="true" />
or
<!--Fixed token, equivalent to the password-->
<dubbo:service interface="com.foo.BarService" token="123456" />
Also can turn on token authentication at protocol level:
<!--Random token , generated using a UUID-->
<dubbo:protocol name="dubbo" token="true" />
or
<!--Fixed token, equivalent to the password-->
<dubbo:protocol name="dubbo" token="123456" />
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.
Last modified January 22, 2021: Merge branch 'master' of https://github.com/apache/dubbo-website (f48eac9)
