Aias00 opened a new issue, #867:
URL: https://github.com/apache/rocketmq-dashboard/issues/867

   ### Problem
   
   The Studio ConsumerGroup create endpoint accepts the request body without 
bean validation. `ConsumerGroupController#createConsumerGroup` does not 
annotate the body with `@Valid`, and `ConsumerGroupVO` does not declare basic 
constraints for fields that are required during creation, such as the group 
name.
   
   As a result, malformed requests such as an empty group name can pass the 
controller boundary and reach the metadata service. This makes the API behavior 
inconsistent with other write endpoints and can surface as less actionable 
downstream errors.
   
   ### Scope
   
   This is in the RocketMQ Studio control-plane scope, specifically the 
ConsumerGroup management baseline.
   
   ### Expected behavior
   
   - Validate ConsumerGroup create requests at the controller boundary.
   - Reject blank group names before calling the metadata service.
   - Keep read/list response fields optional so existing UI responses are not 
affected.
   - Add regression coverage for invalid create payloads.
   
   ### Evidence
   
   - 
`server/src/main/java/org/apache/rocketmq/studio/instance/group/ConsumerGroupController.java`
   - 
`server/src/main/java/org/apache/rocketmq/studio/instance/group/ConsumerGroupVO.java`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to