Skip to content

feat: As a user, when use basic-auth if password or username is error I don't want tell truth message #6703

@liangliang4ward

Description

@liangliang4ward

Description

if not cur_consumer then
return 401, { message = "Invalid user key in authorization" }
end
core.log.info("consumer: ", core.json.delay_encode(cur_consumer))
-- 4. check the password is correct
if cur_consumer.auth_conf.password ~= password then
return 401, { message = "Password is error" }
end

maybe we should tell them "usename or password is error"

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions