yuluo-yx opened a new issue, #2141: URL: https://github.com/apache/rocketmq-dashboard/issues/2141
## Affected branch rocketmq-studio at 737a7b4d ## Problem MetricsService normalizes the configured authentication type, but MetricsSourceFactory and MetricsSourceSettings do not carry it to the Prometheus-compatible client. The request code instead infers authentication from whichever credential field is populated. This can send an Authorization header for auth type none, and can choose Bearer when auth type basic is configured but a stale token is also present. ## Expected behavior Dynamic metrics data sources should apply none, basic, or bearer strictly according to authType and reject missing credentials or unknown modes with a clear service error. ## Reproduction Create metrics data sources with none plus populated credentials, or basic plus both basic credentials and a bearer token, then inspect the outbound Authorization header. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
