PiliLily commented on issue #427: URL: https://github.com/apache/rocketmq-dashboard/issues/427#issuecomment-5069232066
Draft PR #546 is available for the separate BASE-01 Console authentication/authorization slice claimed above. It activates the complete fail-closed boundary: strict cost-12 bcrypt registry, opaque revocable Bearer sessions, bounded login attempts, exact 91-route role policy, readiness, frontend Axios/SSE 401 handling, and secure Compose/Podman/TLS deployment guidance. The larger file count is intentional because these responsibilities and their tests must become effective atomically. Local verification at `d294ed316ff389bd09a98aa48cb0e78aad391cb5`: 524 backend tests, Checkstyle/package, 184 frontend tests plus Node 20 lint/build, and a live Docker authentication/reload/readiness/network-binding lifecycle matrix. Independent security-focused review found no Critical or Important findings. The upstream CI workflow is queued. I am keeping the PR in draft while checks run and while the documented ordering with draft #515 remains unresolved. PR: https://github.com/apache/rocketmq-dashboard/pull/546 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
