Ashhar Ahmad Khan created FINERACT-2738:
-------------------------------------------
Summary: Add warning when Idempotency-Key header is missing
(config-gated)
Key: FINERACT-2738
URL: https://issues.apache.org/jira/browse/FINERACT-2738
Project: Apache Fineract
Issue Type: Improvement
Reporter: Ashhar Ahmad Khan
Currently, when the Idempotency-Key header is missing, the request is processed
silently, with no signal and no log, risking unintended duplicate command
processing with zero observability.
Per Adam Saghy's review feedback on PR #5873, unconditional WARN logging is not
acceptable, since it would spam logs for clients who don't use idempotency
handling. The agreed direction is to gate the warning behind an opt-in global
configuration flag:
"Introduce a new global configuration option: enable-idempotency-validation. By
default value is disabled (backward compatibility). Only log on WARN level if
it is enabled (use service which cache global configuration value)."
*Proposed Implementation*
New global config key enable-idempotency-validation, disabled by default.
WARN level log emitted only when the flag is enabled, checked via the cached
global configuration service (ConfigurationDomainService).
No change to existing request processing behavior, this is observability only.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
