nodece opened a new pull request, #16016:
URL: https://github.com/apache/pulsar/pull/16016

   Signed-off-by: Zixuan Liu <node...@gmail.com>
   
   ### Motivation
   
   When token expiration, the broker requests the client to refresh the token, 
then the broker performs 
`org.apache.pulsar.broker.service.ServerCnx#doAuthentication` when the broker 
receives the auth response, which uses 
`org.apache.pulsar.broker.authentication.AuthenticationState#authenticate` to 
authentication, but the 
`org.apache.pulsar.broker.authentication.AuthenticationProviderToken.TokenAuthenticationState#authenticate`
 doesn't do anything, this cause a loop to refresh the token.
   
   Right now the token is only validated in the TokenAuthenticationState 
constructor, we need to add a check to the authentication method.
   
   ### Modifications
   
   - Add check the token expiration
   
   ### Documentation
   
   - [x] `doc-not-needed` 
   Fix
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to