openwhisk-apigateway icon indicating copy to clipboard operation
openwhisk-apigateway copied to clipboard

Variable scope leakage causing auth failures / race conditions

Open mhamann opened this issue 5 years ago • 0 comments

When running a gateway using Openresty 1.15.8.3, the https://github.com/apache/openwhisk-apigateway/blob/master/scripts/lua/policies/security/apiKey.lua and https://github.com/apache/openwhisk-apigateway/blob/master/scripts/lua/policies/security/clientSecret.lua files are conflicting due to having functions of the same name, but not defined as local.

I currently don't know why this wasn't an issue on 1.13.x, but those builds do not exhibit this behavior.

The module functions need to be declared local in order to prevent the scope issues.

mhamann avatar Aug 02 '20 02:08 mhamann