Dwi Siswanto e7968de431

fix(authx): prevent deadlock in dynamic auth fetching ...

resolve deadlock that occurs when dynamic auth
templates trigger recursive auth requests during
execution.

RCA:
1. `GetStrategies()` calls `Fetch()` to retrieve
   auth creds.
2. `Fetch()` executes auth template via cb.
3. template exec triggers HTTP requests requiring
   auth.
4. recursive calls `GetStrategies()` → `Fetch()`
   cause deadlock on mutex.

notable changes:
* add `fetching` flag to `Dynamic` struct to track
  fetch-in-progress state.
* modify `GetStrategies()` to return empty
  strategies if already fetching.
* update `Fetch()` method with proper recursive
  call prevention.
* use mutex-protected flag reads to ensure thread
  safety.
* refactor `GetStrategies()` with local function
  for code reuse.

this prevents infinite recursion during auth
template execution while maintaining proper sync
and err handling.

fixes goroutine deadlocks in auth system when
using dynamic secrets with templates that require
auth.

Signed-off-by: Dwi Siswanto <git@dw1.io>

2025-09-10 13:19:19 +07:00

..

authx

fix(authx): prevent deadlock in dynamic auth fetching

2025-09-10 13:19:19 +07:00

file.go

Path-Based Fuzzing SQL fix (#6400)

2025-08-25 13:36:58 +05:30

interface.go

feat: add support for multiple auth strategies per target from secrets file (#5500)

2024-08-16 11:59:15 +05:30

multi.go

fix secrets lookup logic (#6059)

2025-02-20 06:01:24 +05:30