FreeOnePlus opened a new pull request, #113: URL: https://github.com/apache/doris-mcp-server/pull/113
## Summary - remove shipped static bearer tokens and the legacy default secret - require explicit high-entropy credentials before static or management token modes can start - prevent token-management configuration variables from being loaded as bearer tokens - remove the hardcoded database recovery credential and document secure bootstrap - keep the repository token file as a credential-free template ## Testing - 383 passed, 61 skipped (full suite) - 37 passed (token bootstrap and security-focused suite) - 18 passed (Streamable HTTP, real subprocess STDIO, and multi-worker protocol) - 4 passed against real Doris over Streamable HTTP and subprocess STDIO - temporary tables/users after real Doris tests: 0/0 - uv lock, build, compile, shell, Compose, package-content, and isolated-wheel CLI gates passed -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
