This is an automated email from the ASF dual-hosted git repository. imbajin pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/hugegraph-toolchain.git
commit a2b4db6219b5f0f71f1245b9665f3f8a80d91994 Author: dark <[email protected]> AuthorDate: Sat Aug 29 23:12:51 2026 +0800 fix(hubble): cover PD token password handling - assert PD token login keeps no plaintext password - cover both password session attributes - preserve token validation checks --- .../src/test/java/org/apache/hugegraph/unit/AuthSecurityTest.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/hugegraph-hubble/hubble-be/src/test/java/org/apache/hugegraph/unit/AuthSecurityTest.java b/hugegraph-hubble/hubble-be/src/test/java/org/apache/hugegraph/unit/AuthSecurityTest.java index cd3d8f759..da4cd1206 100644 --- a/hugegraph-hubble/hubble-be/src/test/java/org/apache/hugegraph/unit/AuthSecurityTest.java +++ b/hugegraph-hubble/hubble-be/src/test/java/org/apache/hugegraph/unit/AuthSecurityTest.java @@ -931,6 +931,10 @@ public class AuthSecurityTest { Mockito.verify(userClient).close(); Assert.assertEquals("server-token", request.getSession().getAttribute( Constant.TOKEN_KEY)); + Assert.assertNull(request.getSession().getAttribute( + Constant.PASSWORD_KEY)); + Assert.assertNull(request.getSession().getAttribute( + Constant.PASSWORD_EXPIRE_AT_KEY)); } @Test
