The GitHub Actions job "CI" on rocketmq-dashboard.git/rocketmq-studio has 
failed.
Run started by GitHub user lizhimins (triggered by lizhimins).

Head commit for run:
33b5407464542ea0aacc4330376c5e8515e9b006 / xdz <[email protected]>
feat(auth): complete the studio account lifecycle: role change, deletion, 
lockout visibility, forced rotation (#7312)

* feat(auth): complete the studio account lifecycle: role change, deletion, 
lockout visibility, forced rotation
Completes the studio account lifecycle: guarded role changes and deletions, 
login-lockout visibility for administrators, and forced rotation of passwords 
chosen by someone else.
* fix(auth): enforce the outstanding password change on the server too
The rotation was only prompted by the login page, so an API client that held on 
to
the token issued at login could use the whole surface with a credential somebody
else chose. Refuse every path except the rotation itself and logout while the 
flag
is set — 403 "Password change required" — and cover it with an interceptor case 
that
goes red the moment the gate stops applying to administrators.
Also document the three new endpoints in api-spec.md §17.4-17.6 (role change, 
account
deletion, login lockout snapshot) with their 400 and 409 boundaries, and widen 
§17 to
the account surface they belong to.

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/40304562621

With regards,
GitHub Actions via GitBox

Reply via email to