unbridled-41 opened a new issue, #6006: URL: https://github.com/apache/rocketmq-dashboard/issues/6006
### Studio Version branch: `rocketmq-studio` @ `7e7aa344` ### Runtime Environment Backend tests: `cd server && mvn -o -B -ntp test -Dtest='CloudCredentialServiceTest'`. ### Describe the Bug The create path validates presence only, then writes `name VARCHAR(128)`, `access_key VARCHAR(255)` and `secret_key VARCHAR(512)` - and the secret column holds the base64 of the value that was checked, so the effective plaintext limit is 384 characters and nothing enforced it. An over-long value reached the database, the rejection was not translated, and the API answered 500 with no hint about the limit - which the caller cannot guess, because the encoding is what overflows. ### Steps to Reproduce `POST /api/settings/cloud-credentials` with a 129-character name, a 256-character accessKey, or a 400-character secretKey. ### What Did You Expect to See? A 400 naming the limit. ### What Did You See Instead? A generic 500. ### Impact The credential cannot be created and the message does not say why. ### Acceptance Criteria The fields are bounded to their columns, the secret by the length of the stored value, with a regression test. **Corresponding PR:** #ISSUEPR# -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
