Dubbo调用时报错Invalid token Forbid invoke remote service interface
dubbo開啟token服務(wù)后,使用集群容錯(cuò)策略為FailoverClusterInvoker,當(dāng)出現(xiàn)服務(wù)調(diào)用失敗進(jìn)行轉(zhuǎn)移,重試其它服務(wù)器時(shí),會(huì)出現(xiàn)token invalid錯(cuò)誤,provider會(huì)拒絕服務(wù)調(diào)用。
原因:
消費(fèi)端:
1、com.alibaba.dubbo.rpc.cluster.support.FailoverClusterInvoker#doInvoke:
for (int i = 0; i < len; i++) {//重試時(shí),進(jìn)行重新選擇,避免重試時(shí)invoker列表已發(fā)生變化.//注意:如果列表發(fā)生了變化,那么invoked判斷會(huì)失效,因?yàn)閕nvoker示例已經(jīng)改變if (i > 0) {checkWheatherDestoried();copyinvokers = list(invocation);//重新檢查一下checkInvokers(copyinvokers, invocation);}Invoker<T> invoker = select(loadbalance, invocation, copyinvokers, invoked);invoked.add(invoker);RpcContext.getContext().setInvokers((List)invoked);try {if (le != null && logger.isWarnEnabled()) {logger.warn("Although retry the method " + invocation.getMethodName()+ " in the service " + getInterface().getName()+ " was successful by the provider " + invoker.getUrl().getAddress()+ ", but there have been failed providers " + providers + " (" + providers.size() + "/" + copyinvokers.size()+ ") from the registry " + directory.getUrl().getAddress()+ " on the consumer " + NetUtils.getLocalHost()+ " using the dubbo version " + Version.getVersion() + ". Last error is: "+ le.getMessage(), le);}return result;} catch (RpcException e) {if (e.isBiz()) { // biz exception.throw e;}le = e;} catch (Throwable e) {le = new RpcException(e.getMessage(), e);} finally {providers.add(invoker.getUrl().getAddress());}2、com.alibaba.dubbo.rpc.protocol.AbstractInvoker#invoke
RpcInvocation invocation = (RpcInvocation) inv;invocation.setInvoker(this);if (attachment != null && attachment.size() > 0) {invocation.addAttachmentsIfAbsent(attachment); //添加相關(guān)參數(shù)到附件attachments,如token}Map<String, String> context = RpcContext.getContext().getAttachments();if (context != null) {invocation.addAttachmentsIfAbsent(context);}3、addAttachmentsIfAbsent實(shí)現(xiàn):
public void setAttachmentIfAbsent(String key, String value) {if (attachments == null) {attachments = new HashMap<String, String>();}if (! attachments.containsKey(key)) { //key不存在時(shí)才進(jìn)行賦值,因此不能進(jìn)行覆蓋操作attachments.put(key, value);}}服務(wù)提供方:
public class TokenFilter implements Filter {public Result invoke(Invoker<?> invoker, Invocation inv)throws RpcException {String token = invoker.getUrl().getParameter(Constants.TOKEN_KEY);if (ConfigUtils.isNotEmpty(token)) {Class<?> serviceType = invoker.getInterface();Map<String, String> attachments = inv.getAttachments();//解析attachments String remoteToken = attachments == null ? null : attachments.get(Constants.TOKEN_KEY);if (! token.equals(remoteToken)) {throw new RpcException("Invalid token! Forbid invoke remote service " + serviceType + " method " + inv.getMethodName() + "() from consumer " + RpcContext.getContext().getRemoteHost() + " to provider " + RpcContext.getContext().getLocalHost());}}return invoker.invoke(inv);}}通過上面的代碼分析可知,當(dāng)消費(fèi)者調(diào)用服務(wù)方服務(wù)出現(xiàn)超時(shí)進(jìn)行失敗重連時(shí),要重連的Invoker的token沒有覆蓋上一次的invoker的token,而服務(wù)端比較token時(shí)比較的是attachment, 進(jìn)而出現(xiàn)token invalid錯(cuò)誤。相當(dāng)于失敗重連無效.
錯(cuò)誤現(xiàn)象:
1、請(qǐng)求超時(shí),此時(shí)token是一致的
telnet=invoke,status,replacetoken&timeout=1000×tamp=1418813410249&token=020f16e2-e060-4c85-a31a-017aa0ee268c&version=1.0, cause: Waiting server-side response timeout. start time: 2014-12-17 21:42:26.735, end time: 2014-12-17 21:42:27.736, client elapsed: 0 ms, server elapsed: 1001 ms, timeout: 1000 ms, request: Request [id=27484, version=2.0.0, twoway=true, event=false, broken=false, data=RpcInvocation […], attachments={token=020f16e2-e060-4c85-a31a-017aa0ee268c,
。。。。。。。
2、失敗重連,此時(shí)附件token與url的不一致
…&pid=29465&revision=1.0.1&side=consumer&status=spring,load&telnet=invoke,status,replacetoken&timeout=1000×tamp=1418813410249
&token=0f3103ad-ac7b-4906-897c-b51e69ab3b96&version=1.0 -> RpcInvocation […],
attachments={token=020f16e2-e060-4c85-a31a-017aa0ee268c,
。。。。。。。
3、出現(xiàn)token invalid
com.alibaba.dubbo.rpc.RpcException: Invalid token! Forbid invoke remote service interface
可以將token設(shè)置為false解決
總結(jié)
以上是生活随笔為你收集整理的Dubbo调用时报错Invalid token Forbid invoke remote service interface的全部?jī)?nèi)容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: Hbase二级索引+CDH+Lily
- 下一篇: ElasticSearch 索引、更新和