youngkermit8-coder opened a new issue, #1778:
URL: https://github.com/apache/rocketmq-dashboard/issues/1778

   ## Description
   
   The current `rocketmq-studio` head registers `AuthInterceptor` in every MVC 
slice even when the slice does not provide an `AuthService`. Because missing 
settings now fail closed, `preHandle` proceeds to call the absent service and 
returns HTTP 500 with:
   
   ```
   NullPointerException: Cannot invoke AuthService.isAuthenticated(String) 
because this.authService is null
   ```
   
   This breaks controller slice tests that intentionally use 
`@AutoConfigureMockMvc(addFilters = false)` and do not import authentication 
dependencies. On current head, all 27 tests in `ConsumerGroupControllerTest` 
and `TopicControllerTest` fail with 500 responses.
   
   ## Reproduction
   
   ```bash
   cd server
   mvn -Dtest=ConsumerGroupControllerTest,TopicControllerTest test
   ```
   
   Observed: `Tests run: 27, Failures: 27`.
   
   ## Expected behavior
   
   MVC slices without an `AuthService` should omit the authentication 
interceptor. Full application contexts and authentication integration tests, 
which provide the service, should continue registering and enforcing it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to