Re: [I] help request: How to Add New Luarocks Dependencies in APISIX Docker Environment? [apisix]

2025-02-22 Thread via GitHub
amyrprv closed issue #11945: help request: How to Add New Luarocks Dependencies in APISIX Docker Environment? URL: https://github.com/apache/apisix/issues/11945 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL abov

[PR] fix(grpc-web): response contains two trailer chunks [apisix]

2025-02-22 Thread via GitHub
bzp2010 opened a new pull request, #11988: URL: https://github.com/apache/apisix/pull/11988 ### Description This PR is intended to address the following issues: - Sometimes grpc-web requests incorrectly contain two trailer blocks, which according to grpc's protocol requirements

Re: [PR] feat(openid-connect): add jwt audience validator [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on PR #11987: URL: https://github.com/apache/apisix/pull/11987#issuecomment-2676638954 We should consider the design of the configuration items more carefully, as it may not align with ergonomic best practices. I'd appreciate your feedback. -- This is an automated messag

Re: [PR] feat(openid-connect): add jwt audience validator [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on code in PR #11987: URL: https://github.com/apache/apisix/pull/11987#discussion_r1966678412 ## apisix/plugins/openid-connect.lua: ## @@ -547,6 +575,40 @@ function _M.rewrite(plugin_conf, ctx) return 403, core.json.encode(error_response)

Re: [PR] feat(openid-connect): add jwt audience validator [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on code in PR #11987: URL: https://github.com/apache/apisix/pull/11987#discussion_r1966678247 ## apisix/plugins/openid-connect.lua: ## @@ -89,6 +90,33 @@ local schema = { type = "string", default = "apisix", }, +claim_

Re: [PR] feat(openid-connect): add jwt audience validator [apisix]

2025-02-22 Thread via GitHub
nic-chen commented on code in PR #11987: URL: https://github.com/apache/apisix/pull/11987#discussion_r1966676298 ## apisix/plugins/openid-connect.lua: ## @@ -89,6 +90,33 @@ local schema = { type = "string", default = "apisix", }, +claim

Re: [PR] fix: Updated route name length το 3 times the default, to cope with Ingress Controller problems [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on PR #11822: URL: https://github.com/apache/apisix/pull/11822#issuecomment-2676381076 I don't think it's a good idea to just do dirty patches like this on the route spec. If it is ok to extend the limit values, then the same thing should be done for all resources.

Re: [I] Ingress Controller ApisixRoutes: Reaching limit with less than 100 Characters [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11821: URL: https://github.com/apache/apisix/issues/11821#issuecomment-2676378948 The "problem" does exist, so the question is how we should address it, and that topic can be continued on your PR. -- This is an automated message from the Apache Git Service. To

Re: [I] help request: Are there any examples of custom balancer? [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11876: URL: https://github.com/apache/apisix/issues/11876#issuecomment-2676376406 Doesn't your custom load balancer algorithm work after placing it in the apisix/balancer directory? Do you have any error logs? If your question is on how to write a load bala

Re: [I] help request: APISIX cannot connect to etcd when Auth and TLS is enabled [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11885: URL: https://github.com/apache/apisix/issues/11885#issuecomment-2676375030 #5608 https://github.com/patroni/patroni/issues/3071 https://github.com/patroni/patroni/pull/3073 You need to make TLS and Auth separate in etcd, i.e. not use CommonN

Re: [I] bug: log-rotate not work when access log is file and error log `/dev/stderr` [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11915: URL: https://github.com/apache/apisix/issues/11915#issuecomment-2676372787 It doesn't make much sense why log-rotate would need to be used or work properly if the error logs will be output to a standard error device. When you use /dev/stderr, log tru

Re: [I] feat: As a user, I want to collect some data from the response sent by OPA, so that I can rewrite the URI [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11909: URL: https://github.com/apache/apisix/issues/11909#issuecomment-2676370292 You can make any changes on your own copy of the plugin, just copy the file and change its name. After that, copy it back to the container. If you want this functionality to b

Re: [I] help request: How to Add New Luarocks Dependencies in APISIX Docker Environment? [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11945: URL: https://github.com/apache/apisix/issues/11945#issuecomment-2676368140 @amyrprv The debian package repository contains dependencies that are not always up-to-date (for some libraries, the version may be locked), so you must download the source

Re: [I] bug: lua_shared_dict prometheus-metrics overflow [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11948: URL: https://github.com/apache/apisix/issues/11948#issuecomment-2676366094 Generally this has to do with how discrete the requests are on your API service, which is related to multiple metrics such as route_id, resp_code, or even consumer_id, etc. (https:

Re: [I] docs: 404 page not found for APISIX docs 3.0 version [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11950: URL: https://github.com/apache/apisix/issues/11950#issuecomment-2676362684 It may have something to do with a misunderstanding when the last document was archived. I'll see what I can do to restore access. -- This is an automated message from the Apache

Re: [I] help request: Can APISIX 3.2.0 support Kubernetes version 1.28 and above [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11953: URL: https://github.com/apache/apisix/issues/11953#issuecomment-2676361951 APISIX is not directly associated with any Kubernetes version, either as a function of the API gateway or the built-in Kubernetes service discovery (unless Kubernetes has modified i

Re: [I] bug: Error during consul discovery synchronization when port field is missing in Consul service [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11959: URL: https://github.com/apache/apisix/issues/11959#issuecomment-2676353665 This means that this node needs to be skipped when the Consul response does not contain the port or any of the fields we need, right? -- This is an automated message from the Apac

Re: [I] help request: [OIDC]When generate state, check in session? [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11955: URL: https://github.com/apache/apisix/issues/11955#issuecomment-2676355097 What exactly does this lead to? I mean functionally and security wise. The current code does work properly. Can you provide more context? -- This is an automated message from th

Re: [I] bug: 上游为域名的时候请求404 [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11978: URL: https://github.com/apache/apisix/issues/11978#issuecomment-2676352350 If your upstream has to be accessed by a domain, I think you may be using some kind of LB that will pass the domain name to discover some kind of “virtual server”, which only allows

Re: [I] bug: lots of warning logs for batch-processor-manager.lua removing batch processor stale object [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11984: URL: https://github.com/apache/apisix/issues/11984#issuecomment-2676342999 This is usually related to the logger plugin not being able to handle log uploads correctly, such as network errors or authentication errors. When a data batch upload fails and the

Re: [I] bug: 开发了一个插件,修改了server返回的流式响应的请求体,apisix一次响应不是一个chunk,而是累积几个chunk一起响应 [apisix]

2025-02-22 Thread via GitHub
bzp2010 commented on issue #11977: URL: https://github.com/apache/apisix/issues/11977#issuecomment-2676345538 1. 检查网关前的任何潜在L4/L7负载均衡器,确认它们是不是具有并开启了响应体缓冲。 2. 如果网关前没有任何负载均衡器,则尝试使用自定义NGINX配置以关闭 proxy_buffering, https://apisix.apache.org/docs/apisix/customize-nginx-configuration/ -

[PR] fix: forget should be changed to addratelimited [apisix-ingress-controller]

2025-02-22 Thread via GitHub
raylan-chen opened a new pull request, #2357: URL: https://github.com/apache/apisix-ingress-controller/pull/2357 ### Type of change: - [x] Bugfix - [ ] New feature provided - [ ] Improve performance - [ ] Backport patches - [ ] Documentation - [ ] Refactor - [ ] Chore

[PR] feat(openid-connect): add jwt audience validator [apisix]

2025-02-22 Thread via GitHub
bzp2010 opened a new pull request, #11987: URL: https://github.com/apache/apisix/pull/11987 ### Description Add JWT audience authentication to the OpenID Connect plugin, which allows: - Asserts that the claim must exist, otherwise the request is rejected. - Asserts that it sh

Re: [PR] feat(cas-auth): support logged-in user header [apisix]

2025-02-22 Thread via GitHub
github-actions[bot] commented on PR #11445: URL: https://github.com/apache/apisix/pull/11445#issuecomment-2676129940 This pull request/issue has been closed due to lack of activity. If you think that is incorrect, or the pull request requires review, you can revive the PR at any time. --

Re: [PR] feat(cas-auth): support logged-in user header [apisix]

2025-02-22 Thread via GitHub
github-actions[bot] closed pull request #11445: feat(cas-auth): support logged-in user header URL: https://github.com/apache/apisix/pull/11445 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the spe