messere1 opened a new issue, #1587:
URL: https://github.com/apache/rocketmq-dashboard/issues/1587

   ## Problem
   
   The authentication storage helpers already tolerate browsers where Web 
Storage is unavailable, but the Axios request interceptor reads `localStorage` 
directly:
   
   ```ts
   const token = localStorage.getItem(TOKEN_STORAGE_KEY);
   ```
   
   Browsers can throw a `SecurityError` for this call under restrictive privacy 
settings, sandboxed contexts, or disabled storage. In that case the interceptor 
rejects every API request before it reaches the network, including requests 
that could run without a stored token.
   
   ## Expected behavior
   
   - Failure to read browser storage should be treated as an absent token.
   - The API request should still be sent without an `Authorization` header.
   - Normal stored-token behavior must remain unchanged.
   - A regression test should exercise a throwing `localStorage.getItem` 
implementation.
   
   ## Scope
   
   Frontend API client and focused unit test only. No server-side 
authentication behavior changes.
   
   ## Track
   
   Track 1 / Studio authentication and client reliability.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to