SPUERSAIYAN opened a new pull request, #237: URL: https://github.com/apache/eventmesh-dashboard/pull/237
### Motivation Add configurable HTTP authentication to the Dashboard Console by reusing Lantern's database-backed policies and its in-process Dubbo `injvm` integration. ### Modifications - Wire the Lantern Spring MVC plugin and provider into the Console's `lantern` profile, with separate mapper sessions for Lantern and Dashboard data. - Configure the cluster query route to use Lantern's local `DBAuthentication` service. Lantern owns the service export and reference. - Add tests for opt-in loading and policy enforcement. The live MySQL and Redis tests run only when explicitly selected. This PR depends on [githublaohu/lantern#13](https://github.com/githublaohu/lantern/pull/13). Build and install the updated Lantern `0.0.1-SNAPSHOT` before verifying Dashboard. ### Documentation - New feature: yes. - To enable it, activate the `lantern` profile, set `DASHBOARD_API_AUTH_ENABLED=true` and `DASHBOARD_AUTH_SYSTEM_ID`, and configure the protected routes in `includePaths`. Lantern reads `PUBLIC`, `USER`, and `ROLE` policies from its resources table. ### Validation - Passed all 3 Lantern loading tests on the current `dev-maven-release` base. - Earlier end-to-end validation of the same integration confirmed HTTP `200` for `PUBLIC`, `401` for missing or invalid tokens under `USER`, and `403` for users without the required role under `ROLE`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
