zjncs opened a new pull request, #6269:
URL: https://github.com/apache/rocketmq-dashboard/pull/6269

   ### What
   
   AuthProperties is the studio.auth configuration. It had no test. This pins: 
the zero-config defaults are secure (no login required, secure session cookie 
named rmq_studio_session with Strict same-site), and configuredUsers() only 
surfaces users that actually carry a username and password - half-configured 
entries are silently ignored rather than half-working.
   
   ### Verification
   
   - New tests on unmodified code: **3/3 green**, checkstyle clean.
   - Discriminating mutation: the same-site default drifted to Lax (red).
   - Restored: green. Test-only change; no product code touched.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to