zmuxuny opened a new pull request, #5391: URL: https://github.com/apache/rocketmq-dashboard/pull/5391
### Summary Refs #5376. Remove standalone bootstrap username/password fallbacks, require login in the general environment example, and leave bootstrap values for the operator to supply. Correct English/Chinese first-use, contributor and remote-deployment instructions: the first login seeds a configured account while protection remains enabled; no anonymous-management phase is needed. ### Compatibility Existing database users stay authoritative and need no bootstrap variables; no account migration or reset. A fresh standalone deployment now requires explicit credentials, matching the existing Compose behavior. Missing setup values are recovered by configuring/restarting the server, without deleting its database or disabling protection. Static/runtime login-policy semantics, explicit local opt-out, cookie defaults, network bindings and deploy.sh are unchanged. Broader local/public mode enforcement remains a separate decision in #5376. Existing datasource and broker demo configuration is unchanged; no real credentials are added. ### Verification - Final focused Java matrix: **108 tests passed**, 0 failures/errors/skips: AuthBootstrapConfigurationTest,AuthServiceTest,AuthServiceDatabaseTest,AuthInterceptorTest - Against unchanged base application.yml: 8 new configuration-binding cases produced **6 expected failures**, 2 compatibility passes; final restored source passes all 8 - Static setup checks: base 3 failures/1 pass; patched 4/4 pass - Production/test compilation, 0 Checkstyle violations, YAML parsing, shell syntax and git diff --check pass - Independent read-only code/docs review completed Tests load real application resources in an isolated MockEnvironment; service tests use mock persistence. Temurin21/Maven3.9.11, one 512 MiB test fork, startup Mockito agent. No live service, real credential, Docker startup or full integration build was run locally. ### Prior work Preserves merged #1673’s login-required direction and #2313’s DB-authoritative users. Closed/unmerged #3374 and #2410 concern different property filtering/normalization behavior. AI assistance was used for implementation, regression tests and review. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
