Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

数据源在post请求中明文传输,怎么改成非url中传输,或加密的 #2257

Open
staryzhou opened this issue Dec 19, 2024 · 2 comments

Comments

@staryzhou
Copy link

数据源添加后是加密的,但在实际使用时,有看内网传输中,有post请求带上数据源明文用户名和密码。非常不安全。见如下url

POST /?password=abcpass&query_id=ca7dxxx-xx-xxx-xxx-xxxxx&compress=1&extremes=0&user=dexx&database=dbxx
User-Agent: Apache-HttpClient/4.5 (Java/1.xx)

@staryzhou
Copy link
Author

目前也找到一个地方,即clickhouse数据源 在测试连接时,是http明文覆上密码的;

@staryzhou
Copy link
Author

想给ck换成tcp端口。又不支持。提示如下
Failed to initialize pool: ru.yandex.clickhouse.except.ClickHouseUnknownException: ClickHouse exception, code: 1002, host: 10.xx.xx.xx, port: 9000; Port 9000 is for clickhouse-client program You must use port 8123 for HTTP.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant