You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@rocketmq.apache.org by "zjncs (via GitHub)" <gi...@apache.org> on 2026/10/13 06:13:50 UTC

[PR] test(auth): pin the create-user request and its password redaction [rocketmq-dashboard]

zjncs opened a new pull request, #6578:
URL: https://github.com/apache/rocketmq-dashboard/pull/6578

   ### What
   
   CreateStudioUserDTO is the create-user request. It had no test, and unlike the other sensitive DTOs it is not covered by SensitiveRequestToStringTest - so its password redaction has no net today. This pins: the username is required and bounded at 128, the password is required and bounded 8..256 on both sides, and the password never reaches toString().
   
   ### Verification
   
   - New tests on unmodified code: **4/4 green**, checkstyle clean.
   - Discriminating mutation: @ToString.Exclude removed from password (red - the leak is caught).
   - Restored: green. Test-only change; no product code touched.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org