This is an automated email from the ASF dual-hosted git repository.
nic-6443 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/apisix.git
The following commit(s) were added to refs/heads/master by this push:
new f1018cc44 fix: downgrade decrypt failure log from warn to info (#13324)
f1018cc44 is described below
commit f1018cc44ca687a69f1dee960dc1dd6533dcc928
Author: Nic <[email protected]>
AuthorDate: Thu Apr 30 18:28:30 2026 +0800
fix: downgrade decrypt failure log from warn to info (#13324)
---
apisix/plugin.lua | 22 ++++++++++++++--------
1 file changed, 14 insertions(+), 8 deletions(-)
diff --git a/apisix/plugin.lua b/apisix/plugin.lua
index 73d4df77f..b69ba33a8 100644
--- a/apisix/plugin.lua
+++ b/apisix/plugin.lua
@@ -993,7 +993,13 @@ end
-- - Arbitrary depth dotted paths (e.g., "a.b.c.d")
-- - Array traversal at intermediate nodes (iterate each element)
-- - Leaf type dispatch: string, array of strings, map of strings
+local decrypt_hint = ". This can happen after upgrading if the field was
recently "
+ .. "added to encrypt_fields; if the value was encrypted, verify the
data_encryption "
+ .. "keyring. Re-save the configuration via the Admin API to resolve."
+
local function process_encrypt_field(conf, key_path, operation, plugin_name,
op_name)
+ local log_func = op_name == "decrypt" and core.log.info or core.log.warn
+ local hint = op_name == "decrypt" and decrypt_hint or ""
local dot_pos = core.string.find(key_path, ".")
if not dot_pos then
@@ -1006,8 +1012,8 @@ local function process_encrypt_field(conf, key_path,
operation, plugin_name, op_
if type(val) == "string" then
local result, err = operation(val, "data_encrypt")
if not result then
- core.log.warn("failed to ", op_name, " the conf of plugin [",
- plugin_name, "] key [", key_path, "], err: ",
err)
+ log_func("failed to ", op_name, " the conf of plugin [",
+ plugin_name, "] key [", key_path, "], err: ", err,
hint)
else
conf[key_path] = result
end
@@ -1019,9 +1025,9 @@ local function process_encrypt_field(conf, key_path,
operation, plugin_name, op_
if type(item) == "string" then
local result, err = operation(item, "data_encrypt")
if not result then
- core.log.warn("failed to ", op_name, " the conf of
plugin [",
- plugin_name, "] key [", key_path,
- "] index [", i, "], err: ", err)
+ log_func("failed to ", op_name, " the conf of
plugin [",
+ plugin_name, "] key [", key_path,
+ "] index [", i, "], err: ", err, hint)
else
val[i] = result
end
@@ -1033,9 +1039,9 @@ local function process_encrypt_field(conf, key_path,
operation, plugin_name, op_
if type(v) == "string" then
local result, err = operation(v, "data_encrypt")
if not result then
- core.log.warn("failed to ", op_name, " the conf of
plugin [",
- plugin_name, "] key [", key_path,
- ".", k, "], err: ", err)
+ log_func("failed to ", op_name, " the conf of
plugin [",
+ plugin_name, "] key [", key_path,
+ ".", k, "], err: ", err, hint)
else
val[k] = result
end
