The GitHub Actions job "CI" on rocketmq-dashboard.git/account-lifecycle has 
failed.
Run started by GitHub user lizhimins (triggered by lizhimins).

Head commit for run:
222384e14ce6b78f4ab1f55ec0ff10581e3eeb22 / lizhimins <[email protected]>
fix(auth): enforce the outstanding password change on the server too

The rotation was only prompted by the login page, so an API client that held on 
to
the token issued at login could use the whole surface with a credential somebody
else chose. Refuse every path except the rotation itself and logout while the 
flag
is set — 403 "Password change required" — and cover it with an interceptor case 
that
goes red the moment the gate stops applying to administrators.

Also document the three new endpoints in api-spec.md §17.4-17.6 (role change, 
account
deletion, login lockout snapshot) with their 400 and 409 boundaries, and widen 
§17 to
the account surface they belong to.

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/40304530913

With regards,
GitHub Actions via GitBox

Reply via email to