venkata91 commented on PR #57219:
URL: https://github.com/apache/spark/pull/57219#issuecomment-5062927929
Addressed both P2s and rebased past the #57016 merge.
**P2-a (legacy History Server stores):** instead of bumping the global
`AppStatusStore.CURRENT_VERSION` (which forces every app's disk store to
replay), `getSession` falls back to a field scan on a composite-key miss.
Legacy rows keyed on `sessionId` alone still carry `userId` in the value, so
they resolve after an upgrade with no replay. Test seeds a legacy-keyed row and
asserts it resolves.
**P2-b (opaque userId through the UI request path):** `userId` is now
carried as an unpadded base64url token, whose alphabet survives
`XssSafeRequest` sanitization and the `PagedTable` re-echo untouched, so `'`,
`+`, `=` round-trip intact. Test runs the token through the real sanitization
transform.
Also adapted the REST `sessions/{sessionId}` endpoint to require the
`userId` token (with coverage over the real HTTP filter), and updated
`monitoring.md`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
