Permission Control

Feature Description

Control permissions in the registry through token verification to decide whether to issue a token to consumers, which can prevent consumers from bypassing the registry to access providers. Moreover, the authorization method can be flexibly changed through the registry without modifying or upgrading the provider.

Usage Scenarios

To a certain extent, achieve trusted authentication between the client and server, preventing any client from gaining access and reducing the risk of security issues.

Usage Method

Global Settings

Enable token verification

<!-- Random token, generated using UUID -->
<dubbo:provider token="true" />

or

<!-- Fixed token, equivalent to a password -->
<dubbo:provider token="123456" />

Service Level Settings

<!-- Random token, generated using UUID -->
<dubbo:service interface="com.foo.BarService" token="true" />

or

<!-- Fixed token, equivalent to a password -->
<dubbo:service interface="com.foo.BarService" token="123456" />