tju-yxq opened a new issue, #2585:
URL: https://github.com/apache/rocketmq-dashboard/issues/2585

   ## Problem
   
   The AI Assistant settings page can save or preserve an LLM API key, but it 
cannot remove one:
   
   - leaving the key blank preserves the stored key;
   - entering a new key replaces it;
   - there is no explicit "clear key" action or request flag.
   
   The general settings model already supports `clearApiKey`, but the LLM 
config API and the AI Assistant tab do not expose that capability.
   
   Once a key is stored, an operator cannot remove it through the UI. The only 
way to stop using the saved credential is to replace it with another value or 
edit the database/settings externally.
   
   ## Expected behavior
   
   - Add an explicit clear-key action to the AI Assistant settings tab.
   - Confirm before clearing.
   - Send an explicit `clearApiKey: true` flag to the LLM config endpoint.
   - Clear the persisted API key in settings storage.
   - Do not allow the clear action to silently restore the old key from storage.
   - Do not remove a key injected through `RMQ_LLM_TOKEN`; environment 
configuration remains authoritative at runtime.
   - Keep the normal "leave blank to preserve" behavior unchanged.
   - Update the configured-key indicator after a successful clear.
   
   ## Verification scope
   
   Tests should cover service-level clear semantics, frontend 
confirmation/request behavior, and preservation of the existing empty-key 
behavior.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to