认证

语法
AUTH [username] password
从以下位置开始可用：
1.0.0
时间复杂度：
O（N），其中 N 是为用户定义的密码数
ACL 类别：
@fast, @connection,

AUTH 命令在两种情况下对当前连接进行身份验证：

  1. 如果 Redis 服务器通过requirepass选择。
  2. Redis 6.0 或更高版本的实例正在使用 Redis ACL 系统。

Redis 6 之前的 Redis 版本只能理解 one 参数 版本：

This form just authenticates against the password set with requirepass. In this configuration Redis will deny any command executed by the just connected clients, unless the connection gets authenticated via AUTH.

If the password provided via AUTH matches the password in the configuration file, the server replies with the OK status code and starts accepting commands. Otherwise, an error is returned and the clients needs to try a new password.

When Redis ACLs are used, the command should be given in an extended way:

In order to authenticate the current connection with one of the connections defined in the ACL list (see ACL SETUSER) and the official ACL guide for more information.

When ACLs are used, the single argument form of the command, where only the password is specified, assumes that the implicit username is "default".

Security notice

Because of the high performance nature of Redis, it is possible to try a lot of passwords in parallel in very short time, so make sure to generate a strong and very long password so that this attack is infeasible. A good way to generate strong passwords is via the ACL GENPASS command.

RESP2/RESP3 Reply

Simple string reply: OK, or an error if the password, or username/password pair, is invalid.

History

  • Starting with Redis version 6.0.0: Added ACL style (username and password).
RATE THIS PAGE
Back to top ↑