[
https://issues.apache.org/jira/browse/FINERACT-2738?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ashhar Ahmad Khan reassigned FINERACT-2738:
-------------------------------------------
Assignee: Ashhar Ahmad Khan
> Add warning when Idempotency-Key header is missing (config-gated)
> -----------------------------------------------------------------
>
> Key: FINERACT-2738
> URL: https://issues.apache.org/jira/browse/FINERACT-2738
> Project: Apache Fineract
> Issue Type: Improvement
> Reporter: Ashhar Ahmad Khan
> Assignee: Ashhar Ahmad Khan
> Priority: Minor
>
> Currently, when the Idempotency-Key header is missing, the request is
> processed silently, with no signal and no log, risking unintended duplicate
> command processing with zero observability.
> Per Adam Saghy's review feedback on PR #5873, unconditional WARN logging is
> not acceptable, since it would spam logs for clients who don't use
> idempotency handling. The agreed direction is to gate the warning behind an
> opt-in global configuration flag:
> "Introduce a new global configuration option: enable-idempotency-validation.
> By default value is disabled (backward compatibility). Only log on WARN level
> if it is enabled (use service which cache global configuration value)."
> *Proposed Implementation*
> New global config key enable-idempotency-validation, disabled by default.
> WARN level log emitted only when the flag is enabled, checked via the cached
> global configuration service (ConfigurationDomainService).
> No change to existing request processing behavior, this is observability only.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
