Aias00 commented on PR #2162: URL: https://github.com/apache/rocketmq-dashboard/pull/2162#issuecomment-5306387508
Addressed in the latest branch commits: - Browser logins use the HttpOnly session cookie; API clients explicitly request a bearer token with `X-RocketMQ-Studio-Session-Delivery: bearer`, covered by `AuthControllerTest`. - Bootstrap user inserts tolerate concurrent duplicate-key creation, covered by `AuthServiceDatabaseTest`. - `last_seen_at` writes are throttled by `LAST_SEEN_UPDATE_INTERVAL`, with fresh and stale-session coverage. Validated with `JAVA_HOME=$(/usr/libexec/java_home -v 21) mvn -Dtest=AuthControllerTest,AuthServiceDatabaseTest,AuthCookieTest test`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
