sha174n commented on PR #45452: URL: https://github.com/apache/superset/pull/45452#issuecomment-6341727765
Heads-up: per internal rollout discussion we're taking this warn-first. `enforce_guest_token_identity` now logs an invalid identity instead of rejecting it, gated on `GUEST_TOKEN_IDENTITY_ENFORCE` (default off), across the mint, consume, MCP verifier and request-schema paths. This release logs and still accepts; a later one flips the flag to enforce. UPDATING.md and the tests reflect both the warn default and the enforced path. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
