Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AxonServer incorrectly handles tokens with special characters #498

Open
ViliusS opened this issue May 23, 2022 · 0 comments
Open

AxonServer incorrectly handles tokens with special characters #498

ViliusS opened this issue May 23, 2022 · 0 comments

Comments

@ViliusS
Copy link

ViliusS commented May 23, 2022

AxonServer does allow to set special characters, like % or " in a token and doesn't complain about it, however clients connecting with such token will always get PERMISSION_DENIED: Invalid token.

Looks like this could be a limitation of https://grpc.github.io/grpc-java/javadoc/io/grpc/Metadata.Key.html

Just spent an hour trying to find out why our AxonServer installation doesn't work with Access Control enabled, which was my own mistake actually. I set axoniq.axonserver.accesscontrol.token="mytoken" by mistake (notice the quotes). Setting it to axoniq.axonserver.accesscontrol.token=mytoken solved the issue.

Still I think AxonServer should not start with such characters in a token. At a minimum documentation needs to be very specific what's allowed and what's not, since most password/token generators allow special characters by default.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant