ai-yang opened a new pull request, #717:
URL: https://github.com/apache/rocketmq-dashboard/pull/717

   Fixes #716
   
   ## Summary
   
   - exempt only `/auth/login` and `/auth/status` from the global 
protected-session 401 recovery path
   - keep session clearing and redirect behavior unchanged for business API 401 
responses
   - add regression coverage for both public endpoints and a protected API
   
   ## Root cause
   
   The shared Axios interceptor interpreted every HTTP 401 as an expired 
protected session. Expected authentication failures such as invalid login 
credentials therefore cleared local state and navigated away before the public 
auth caller could handle the error.
   
   ## Validation
   
   - deterministic baseline reproduction: failed 5/5 before the fix
   - focused public/protected 401 regression: passed 20/20 after the fix
   - full Node 20 frontend suite: 63 files / 268 tests
   - `npm run lint`: 0 errors (4 existing Fast Refresh warnings)
   - `npm run build`: passed
   - `git diff --check`: passed
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to