Aias00 opened a new issue, #825: URL: https://github.com/apache/rocketmq-dashboard/issues/825
## Problem `LoginVO` uses Lombok `@Data` and contains the issued login `token`. Lombok includes all fields in the generated `toString()` output by default, so accidental response logging or debug output can expose active session tokens. ## Evidence - `server/src/main/java/org/apache/rocketmq/studio/auth/LoginVO.java` declares `@Data`. - The DTO includes a `token` field. ## Expected behavior The login token should not appear in generated diagnostic output. Non-sensitive fields such as expiration and user identity can remain visible. ## Scope Small hardening fix for the Studio authentication response path. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
