Aias00 opened a new pull request, #7230: URL: https://github.com/apache/rocketmq-dashboard/pull/7230
Concurrent requests can both pass the five-minute session activity refresh check. If an older request executes its UPDATE after a newer request, it overwrites last_seen_at with an earlier timestamp and makes session activity summaries inaccurate. Require the stored last_seen_at to be null or older than the candidate time before updating it. The existing five-minute refresh throttle remains in place, and a rejected stale refresh does not reject otherwise valid authentication. Fixes #7228 Validation: - Real H2 regression with fixed request clocks deterministically pauses the older request before SQL, commits a newer authentication refresh, then resumes the older SQL. Both initially null and aged last-seen values fail against the original code and pass after the fix. The test verifies both persisted activity and the management summary. - Full auth package with dev profile: **154 tests, 0 failures, 0 errors, 0 skipped**. - Bound Checkstyle and `git diff --check` passed. JDK 21/H2 validation; no live MySQL/Broker or full-repository suite was run. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
