Backport of Remove warning for consul 1.17 deprecation into release/1.16.x (#19904)
backport of commit 8d43647ed95f04ed0e8a27dd45d680aa7f6e7339 Co-authored-by: Ronald Ekambi <ronekambi@gmail.com>
This commit is contained in:
parent
5126fe18d4
commit
b83af6b165
|
@ -377,7 +377,7 @@ func (s *HTTPHandlers) wrap(handler endpoint, methods []string) http.HandlerFunc
|
|||
logURL = strings.Replace(logURL, token, "<hidden>", -1)
|
||||
}
|
||||
httpLogger.Warn("This request used the token query parameter "+
|
||||
"which is deprecated and will be removed in Consul 1.17",
|
||||
"which is deprecated and will be removed in a future Consul version",
|
||||
"logUrl", logURL)
|
||||
}
|
||||
logURL = aclEndpointRE.ReplaceAllString(logURL, "$1<hidden>$4")
|
||||
|
|
|
@ -42,7 +42,7 @@ $ curl \
|
|||
|
||||
**Security Note:** Though you could pass the token through the `?token=` query parameter,
|
||||
this method is highly discouraged because the token can show up in access logs as part of the URL.
|
||||
The `?token=` query parameter is deprecated and will be removed in Consul 1.17.
|
||||
The `?token=` query parameter is deprecated and will be removed in a future Consul version.
|
||||
|
||||
To learn more about the ACL system read the [documentation](/consul/docs/security/acl).
|
||||
|
||||
|
|
|
@ -75,13 +75,13 @@ The `connect.enable_serverless_plugin` configuration option was removed. Lambda
|
|||
|
||||
#### Deprecating authentication via token query parameter
|
||||
|
||||
Providing a Consul ACL token in API requests using the `token` query parameter is deprecated and will be removed in Consul 1.17.
|
||||
Providing a Consul ACL token in API requests using the `token` query parameter is deprecated and will be removed in a future Consul version.
|
||||
Instead, you should provide the token through the `X-Consul-Token` header or with the Bearer scheme in the authorization header as described in the [API authentication documentation](/consul/api-docs/api-structure#authentication).
|
||||
|
||||
Check whether you are using a `token` query parameter by searching your Consul agent logs for the message:
|
||||
|
||||
```shell-session hideClipboard
|
||||
$ This request used the token query parameter which is deprecated and will be removed in Consul 1.17
|
||||
$ This request used the token query parameter which is deprecated and will be removed in a future Consul version
|
||||
```
|
||||
|
||||
Deprecated authentication using the `token` query parameter:
|
||||
|
|
Loading…
Reference in New Issue