yyqdbngt opened a new pull request, #2858:
URL: https://github.com/apache/rocketmq-dashboard/pull/2858

   ## Summary
   - Move the `TencentClientFactory.client()` fast-path cache read inside the 
same monitor that `invalidateCredential()` holds
   - Add a package-private `cachedClient` seam and a regression test that 
suspends a lookup between the cache read and the return while a concurrent 
credential rotation runs
   
   ## Why
   The cached-client read ran outside the invalidation lock: a thread suspended 
between the map read and the return could hand out a client that a concurrent 
credential rotation (triggered on credential update/delete by 
`CloudCredentialService`) had just evicted. That client still carries the 
replaced secret, so a request signed seconds after a rotation fails with a 
confusing "credential is invalid" even though the new credential is configured.
   
   ## Testing
   - `mvn -Dtest=TencentClientFactoryTest test` → Tests run: 5, Failures: 0, 
Errors: 0 (4 existing + 1 new regression test)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to