Coder Social home page Coder Social logo

dgate's People

Contributors

abcfy2 avatar foxgem avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

dgate's Issues

mock建议可以反映多种情况

正常情况,一个接口会有多种返回,比如正常和异常返回。有时正常返回,不同的参数返回结果也有差别
调试时每次修改接口返回内容比较麻烦,
建议可以配置多种返回,可指定返回哪种
这样在调试时就可以模拟多种情况了。
mock也可以直接作为接口文档使用了。

文件上传/下载问题

目前版本暂无对文件上传和下载的支持,不知是否考虑了相关功能,甚是期待。

url action名以s结尾的找不到相对应的action,报500错误。

"/hidden-rectification-orders/:id/set-condition" {
              methods = [HttpMethod.POST]
              upstreamURLs = [
                                [host: 'localhost', port: 8090, url: '/hidden-rectification-orders/:id/set-condition']
                        ]
           }

后台代码controller: HiddenRectificationOrderController
action: setStatus

访问这个方法 会报500错误。
bb157d3be43f7f1a93263dd6d8a3eedb

是否考虑优化断路器的日志

目前断路器的日志属于INFO级别,并且输出过于频繁,会产生大量的日志,十分吵,并且极容易冲掉有用的日志信息。

考虑优化断路器的日志输出,仅仅在断路器状态变化时打印INFO级别日志,原本的输出信息考虑放在DEBUG级别。

[TODO]反向代理添加X-Real-IP,X-Forwarded-For,X-Forwarded-Proto,UA四个头

经过dgate的请求到了后端看到的始终是dgate发过来的请求。为了能让后端得到真正的用户请求,便于真正的后端对客户端进行某些统计,计划仿照反向代理的通用做法,添加这三个HTTP Header,告知后端真正的用户ip。

同时,添加User-Agent头,以便于后台统计用户浏览器

服务无法获取token信息

配置url无需验证登录(即login->only不包含相应链接), 当用户已登陆, 无法获取相应token信息

Java10 下编译出错

dgate/src/main/java/top/dteam/dgate/utils/JWTTokenGenerator.java:19: error: incompatible types: Long cannot be converted to int
改为:

options.setExpiresInSeconds(expiration.intValue());

就可以了。

关于通过JWTtoken验证登录的安全问题

目前登录验证单单是通过判断token是否过期进行的, 便会存在如下场景:

攻击者解析token获取token组成规则(token中的key->id为用户id), 修改token中的id, 重新生成未过期的token, 利用新的token, 便可模拟任何用户操作, 从而进行攻击.

现在能否规避此问题?

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.