aajisaka opened a new pull request, #7762: URL: https://github.com/apache/kyuubi/pull/7762
### Why are the changes needed? To fix #7745 Add `kyuubi.internal.security.crypto.compatibilityMode` to support rolling upgrades from Kyuubi 1.11.1 or earlier. - `STRICT` (default, same as 1.12.0 behavior) issues and accepts only random-IV-prefixed tokens - `READ_COMPATIBLE` accepts both formats while issuing current tokens - `MIGRATE` issues legacy zero-IV tokens while accepting both. Document the phased `MIGRATE` to `READ_COMPATIBLE` to `STRICT` rollout and cover legacy token generation, secret normalization, and random-IV behavior in tests. ### How was this patch tested? Added unit tests. ### Was this patch assisted by generative AI tooling? Assisted-by: OpenCode (MiMo-V2.6-Pro) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
