![]() #### What type of PR is this? /kind feature /kind api-change /area core /area console #### What this PR does / why we need it: This PR creates AuthenticationWebFilter by ourselves instead of using FormLoginSpec directly. Because we have no chance to customize `org.springframework.security.web.server.authentication.ServerAuthenticationConverter` currently. Meanwhile, we provide CryptoService(RSA) to generate key pair, get public key and decrypt message encrypted by public key. There is a new endpoint to get public key which is used by console: ```bash ❯ curl localhost:8090/login/public-key -s | jq . { "base64Format": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouDtdDS751U8NcWfAAQ53ijEtkLnIHh1Thqkq5QHGslq2hBmWnNsIZFnc/bwVp00ImKLV2NtLgOuv5RRNS5iO+oqRvfOGdXLdW2nzqU2towtaMkYTEMJrsNMZp5BUNCGI7Z2xpPBZzvys0d1BvcpNFobX/LkOtcTyfB1DRp9ZAhxRYOZkTkCzaKo+6X11lnMexTsB3exzaXk9rRZ8XoJ+dWT5G0URs/PF2cDkgxuMdOFJzqDsb9HQYGI/etajdCcKs7mZsjmDgse9Cw9/3mgoTNnEGx9Wl89S0P+FJ7T5DALGt3/nSAlzmKdXJNBLf6Q44ogFpTWdq27JpJD3SKicQIDAQAB" } ``` #### Which issue(s) this PR fixes: Fixes https://github.com/halo-dev/halo/issues/3419 #### Does this PR introduce a user-facing change? ```release-note 支持登录时密码加密传输 ``` |
||
---|---|---|
.. | ||
api-client | ||
components | ||
shared |