Apache Linkis builds a computation middleware layer to facilitate connection, governance and orchestration between the upper applications and the underlying data engines.
I want to add access control functionality to gateway.
Limit the usage of IP addresses for some users. Only the IP addresses configured in the configuration item can use Linkis.
Limit some IP addresses to only send requests to the URL configured in the configuration item.
First determine whether the current user can perform operations from the current IP address, and then determine whether the current IP address has permission to call the current interface.
Related issues/PRs
Related issues: #4983
Brief change log
I added the required configuration for access control in GatewayConfiguration.scala.
I added the core code for access control in SecurityFilter.scala.
How to use the new feature
The following configuration needs to be added to linkis-mg-gateway.properties
linkis.client.access.control.enable -- Whether to enable access configuration, default is false.
linkis.client.access.control.ip -- IPs that need to enable access restrictions.
linkis.client.access.control.url -- URLS that need to enable access restrictions.
linkis.client.access.control.user.enable -- Whether to enable access configuration for users.
linkis.client.access.control.user.${user} -- IPs that need to enable access restrictions.
What is the purpose of the change
I want to add access control functionality to gateway.
Related issues/PRs
Related issues: #4983
Brief change log
How to use the new feature
The following configuration needs to be added to linkis-mg-gateway.properties
Checklist