Aias00 opened a new pull request, #10811: URL: https://github.com/apache/rocketmq/pull/10811
### What - Mask authentication request signatures before writing audit logs. - Keep only a short prefix/suffix for long signatures and fully redact short or blank signatures. - Add tests for short and long signature masking. ### Why Authentication signatures are security-sensitive request material. Audit logs should preserve useful diagnostics without emitting the raw signature value. ### Validation - `JAVA_HOME=$(/usr/libexec/java_home -v 1.8) mvn -pl auth -am -DskipITs -DskipCheckStyle -Dtest=DefaultAuthenticationProviderTest -DfailIfNoTests=false test` - `git diff --check` Closes #10810 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
