yx9o opened a new issue, #584: URL: https://github.com/apache/rocketmq-dashboard/issues/584
## Problem `POST /api/ops/updateIsVIPChannel` and `POST /api/ops/updateUseTLS` accept requests without the required `useVIPChannel` or `useTLS` value. Because the DTO fields use primitive `boolean`, a missing value is deserialized as `false`. The endpoint then returns success and calls the update service, which can silently disable the setting. ## Expected behavior - Reject missing toggle values with HTTP 400. - Prevent invalid requests from changing the setting. - Preserve normal updates for explicit `true` and `false` values. ## Proposed fix Use nullable `Boolean` fields with required validation, validate the request bodies before invoking the service, and add controller regression tests. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
