FreeOnePlus opened a new pull request, #112: URL: https://github.com/apache/doris-mcp-server/pull/112
## Summary - reject admin-token authentication through query strings - accept management credentials only through Authorization or X-Admin-Token headers - stop the token dashboard from reading or propagating credentials in URLs - document header-only access and add regression coverage ## Testing - 371 passed, 61 skipped (full suite) - 91 passed (security-focused suite) - 18 passed (Streamable HTTP, real subprocess STDIO, and multi-worker protocol suite) - 4 passed against real Doris over HTTP and subprocess STDIO - uv lock --check, package build, compileall, shell syntax, isolated wheel CLI smoke -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
