messere1 opened a new pull request, #1588:
URL: https://github.com/apache/rocketmq-dashboard/pull/1588

   ## Summary
   
   - read the persisted bearer token through a storage-safe helper
   - treat Web Storage access failures as an absent token instead of rejecting 
the request
   - add a regression test that throws `SecurityError` from 
`localStorage.getItem`
   
   ## Root cause
   
   The authentication storage module already catches browser storage failures, 
but the Axios request interceptor bypassed it and accessed `localStorage` 
directly. A browser `SecurityError` therefore aborted all API calls before they 
reached the network.
   
   ## User impact
   
   Studio can continue issuing unauthenticated or public requests in 
restricted-storage environments. Normal bearer-token attachment remains 
unchanged when storage is available.
   
   Closes #1587
   
   ## Validation
   
   - `npm test -- --run src/api/client.test.ts` (11 tests passed)
   - `npx eslint src/api/client.ts src/api/client.test.ts --max-warnings=0`
   - `npx prettier --check src/api/client.ts src/api/client.test.ts`
   - `npm run build`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to