Aias00 opened a new pull request, #2162: URL: https://github.com/apache/rocketmq-dashboard/pull/2162
## Summary - add `rmq_studio_user` and `rmq_studio_session` schema plus MyBatis entities/mappers - use immutable user IDs, PBKDF2 password hashes, and SHA-256 token hashes for persisted sessions - bootstrap initial database users from existing `studio.auth.users` only when no Studio user exists - add admin user list/create/enable/disable/password-reset APIs and a minimal UI - add self-service password change; disable and password changes revoke all active sessions - retain the configuration-only authentication path only for narrow legacy unit-test construction ## Scope This deliberately excludes roles beyond the existing admin flag, organizations/tenants, and SSO/OIDC. Closes #2161 ## Verification - `JAVA_HOME=$(/usr/libexec/java_home -v 21) mvn -Dtest=AuthServiceTest,AuthServiceDatabaseTest,PasswordHasherTest test` - `npm run lint` (one pre-existing MainLayout hooks warning remains) - `npm test -- --run src/api/auth.test.ts src/stores/authStorage.test.ts` - `npm run build` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
