RockteMQ-AI commented on issue #2585: URL: https://github.com/apache/rocketmq-dashboard/issues/2585#issuecomment-5412432509
**Issue Evaluation** Category: `bug` | Status: **Confirmed** Valid bug. The general settings model already supports `clearApiKey`, but the LLM config API endpoint and the AI Assistant settings tab do not expose this capability. Once an API key is stored, there is no UI path to remove it. **Root Cause:** The `clearApiKey` flag exists in the settings model but is not wired through: 1. The LLM config API does not accept/process a clear flag. 2. The AI Assistant tab has no "clear key" button or confirmation dialog. **Impact:** Operators who want to stop using a saved API key must edit the database or settings file directly — a poor operational experience and a potential security concern (stale credentials lingering). **Severity:** Medium — functionality gap, not a crash, but affects credential lifecycle management. This is a straightforward fix: expose `clearApiKey` in the API and add a UI action with confirmation. --- *Automated evaluation by github-manager* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
