ai-yang opened a new pull request, #720: URL: https://github.com/apache/rocketmq-dashboard/pull/720
Fixes #719 ## Summary - allow valid Spring CORS preflight requests to reach the configured CORS handler before bearer authentication - keep ordinary anonymous protected requests returning 401 - add a MockMvc integration regression covering the real interceptor and CORS configuration ## Root cause `AuthInterceptor` applied bearer authentication to every `/api/**` request. Browser preflight requests do not carry the business request's Authorization header, so the interceptor returned 401 before Spring could emit CORS response headers. ## Validation - deterministic baseline reproduction: failed 5/5 before the fix - focused preflight and anonymous-request regression: passed 20/20 after the fix - complete Java 21 server suite: 488 tests, 0 failures/errors - Maven package: passed - Checkstyle: 0 violations - `git diff --check`: passed -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
