Aias00 opened a new issue, #848:
URL: https://github.com/apache/rocketmq-dashboard/issues/848

   ### What happened
   
   RocketMQ Studio instance write APIs currently accept a JSON literal `null` 
request body and pass it into the service layer:
   
   - `POST /api/instances/create`
   - `POST /api/instances/update`
   
   `InstanceService#createInstance` and `InstanceService#updateInstance` log 
fields from the request object before any null guard, so a `null` body can fail 
with an internal `NullPointerException` instead of a structured client error.
   
   ### Expected behavior
   
   Instance create/update APIs should reject a missing or JSON `null` request 
body with a clear 400 response, and the service layer should also guard direct 
calls to avoid accidental NPEs.
   
   ### Why this matters
   
   This is part of the RocketMQ Studio control-plane resource management 
baseline. Write APIs should fail predictably and avoid leaking implementation 
errors to users.
   
   ### Scope
   
   RocketMQ Studio / track 1 control-plane instance management.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to