Fix server calling across namespace

ylsGit · May 26, 2020 · c3b404b · c3b404b
1 parent cd28365
commit c3b404b
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/util/wrapper/wrapper.go b/util/wrapper/wrapper.go
@@ -209,8 +209,9 @@ func AuthHandler(fn func() auth.Auth) server.HandlerWrapper {
 				ctx = metadata.Set(ctx, "Micro-Namespace", ns)
 			}
 
-			// Check the issuer matches the services namespace
-			if account != nil && account.Issuer != ns {
+			// Check the issuer matches the services namespace. TODO: Stop allowing go.micro to access
+			// any namespace and instead check for the server issuer.
+			if account != nil && account.Issuer != ns && account.Issuer != "go.micro" {
 				return errors.Forbidden(req.Service(), "Account was not issued by %v", ns)
 			}