yyqdbngt opened a new pull request, #3214: URL: https://github.com/apache/rocketmq-dashboard/pull/3214
## Summary - require public documentation and health endpoints to match a complete path segment - keep valid descendants such as `/swagger-ui/index.html` and `/actuator/health/readiness` public - add regression coverage for lookalike protected paths ## Why The authentication interceptor previously used raw prefix checks for public endpoint trees. That also exempted unrelated paths such as `/api-docs-private` and `/actuator/healthcheck` whenever login enforcement was enabled. ## Testing - `mvn -Dmaven.repo.local=D:\taiyi-maven-cache -Dtest=AuthInterceptorTest test` (passes) - Full server suite was attempted on Windows: 2037 tests ran; unrelated existing CLI-agent shell assumptions and `AliyunInstanceProviderTest.getGroupProgressShouldMapLagRowsTest` failed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
