question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Enhance client side resolution of plain-text files

See original GitHub issue

Config server supports serving plain-text configuration files (for configuration tailored to specific libraries or environments), including placeholder resolution from config server properties. (See http://cloud.spring.io/spring-cloud-static/Dalston.SR1/#_serving_plain_text)

It seems that the only way to consume these resources (in OSS) is via RestTemplate or some similar REST client means. This can be complicated when there are additional hoops to jump through in order to resolve access to these files such as secured authentication/authorization around config server. This may require a client to muck about with authentication/authorization beans to get at the access token needed to consume those resources.

To make this easier such client situations, it would be useful to provide some means by which the clients can consume those resources, but without having to deal with the authentication/authorization specifics.

One possible (off-the-cuff) idea might be to provide some sort of ConfigServerResource or other type that would handle the OAuth concerns under the covers. Here is potential pseudo just to further elaborate the point but not yet fleshed out:

FileInputStream fis = configServer.getConfig("myapp","myprofile");

Along with auto resolution such as:

@Value("nginx.conf") // not sure this is possible with `.` in name
FileInputStream nginxConfFileStream

Regardless of the solution, ideally, the client-side piece would be part of Spring Cloud OSS generically, with hooks provided for SCS to provide OAuth details to be included in the request.

Issue Analytics

  • State:open
  • Created 6 years ago
  • Reactions:10
  • Comments:25 (11 by maintainers)

github_iconTop GitHub Comments

5reactions
spencergibbcommented, Oct 4, 2019

@SpiReCZ this enhancement has not been scheduled for addition at this time. When it has, it will be added to a Project and Milestone.

3reactions
spencergibbcommented, Sep 3, 2019

@csterwa maybe we could port the non-oauth version here. See comments in #1459

Read more comments on GitHub >

github_iconTop Results From Across the Web

Implementing client-side encryption - MediaConvert
Keep your input files secure with client-side encryption. ... This operation returns a plaintext copy of the data key and a copy that...
Read more >
Use client-side encryption with Always Encrypted for Azure ...
Always Encrypted allows clients to encrypt sensitive data inside client applications and never reveal the encryption keys to the database. ...
Read more >
Top 20 OWASP Vulnerabilities And How To Fix Them ...
Learn how to fix these top 20 OWASP web application vulnerabilities that could lead to a compromise.
Read more >
What should the nonce value be for client-side encryption?
The nonce does not need to be secret and can be saved together with the file without being encrypted. This is not insecurity,...
Read more >
Troubleshooting | BIG-IP Edge Client operations guide - AskF5
The tool generates a report (LOG and XML files) in the same directory which displays the client-side objects detected by the scan. BIG-IP...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found