yyqdbngt opened a new pull request, #3373:
URL: https://github.com/apache/rocketmq-dashboard/pull/3373

   ## Summary
   
   Marks `MetricsDataSourceConfig.password`/`bearerToken` as 
`@ToString.Exclude` and adds `MetricsDataSourceConfigTest` locking the contract.
   
   Coverage:
   - `toString` keeps the non-secret fields (`name`, `url`) while omitting both 
credential field names and values;
   - `@Data` equality/hashCode still cover the credentials, so a rotated token 
is not equal.
   
   ## Why
   
   The raw config model holds credentials that are encrypted only at rest; logs 
and debug output must not surface them through `toString`.
   
   ## Testing
   
   `mvn -B test -Dtest=MetricsDataSourceConfigTest` — 2/2 pass; checkstyle 
(validate) clean.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to