yyqdbngt opened a new pull request, #3352: URL: https://github.com/apache/rocketmq-dashboard/pull/3352
## Summary Marks the persisted studio session row's `tokenHash` as `@ToString.Exclude` and adds `RmqStudioSessionTest` locking the contract. Coverage: - `toString` keeps the non-secret fields (`userId`) while omitting the `tokenHash` field name and value; - `@Data` equality/hashCode still cover the token hash, so a rotated hash is not equal. ## Why Even though only a hash is stored, leaking it through `toString` (used in session lifecycle logging) would aid offline session-token guessing; the row otherwise followed the same defensive convention as the credential entities. ## Testing `mvn -B test -Dtest=RmqStudioSessionTest` — 2/2 pass; checkstyle (validate) clean. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
