The GitHub Actions job "Build and Run Tests by Maven" on rocketmq.git/ROCKETMQ-11178 has failed. Run started by GitHub user R0CKing666 (triggered by R0CKing666).
Head commit for run: 5e7507b29ab7fbd6e7001de4010bc450e7551096 / R0CKing666 <[email protected]> [ISSUE #11178] Refuse to start when authorization is enabled without authentication The Remoting authorization pipeline derives the caller identity from the client-supplied AccessKey without any signature verification. Enabling authorization without authentication therefore allows any client to impersonate a known user (including a SUPER user). Reject this configuration in a fail-closed manner: - broker: validate at the top of BrokerController.initialize() before the expensive message store load; - proxy: validate in the AuthorizationPipeline constructors wired for both the gRPC and Remoting protocol servers. Adds unit tests for AuthConfig.validate() and for the pipeline guard, plus a characterization test of the unguarded authorization context builder. Report URL: https://github.com/apache/rocketmq/actions/runs/35557349337 With regards, GitHub Actions via GitBox
