You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@rocketmq.apache.org by "yuluo-yx (via GitHub)" <gi...@apache.org> on 2026/08/29 16:19:59 UTC
[I] Reject corrupted identity metadata from browser storage [rocketmq-dashboard]
yuluo-yx opened a new issue, #2769:
URL: https://github.com/apache/rocketmq-dashboard/issues/2769
## Problem
Browser storage parsing accepts zero, negative, and fractional user IDs, and interprets every non-true admin value as false. Corrupted storage can therefore create a plausible but invalid local identity.
## Expected behavior
Accept only positive safe-integer IDs and only the literal true/false permission values; otherwise return unknown metadata.
## Verification
Add an auth storage regression test with malformed ID and admin values.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Reject corrupted identity metadata from browser storage [rocketmq-dashboard]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #2769:
URL: https://github.com/apache/rocketmq-dashboard/issues/2769#issuecomment-5555729995
This issue has been automatically closed because there has been no activity for 7 days. If you believe this issue is still relevant, please reopen it with updated information.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Reject corrupted identity metadata from browser storage [rocketmq-dashboard]
Posted by "RockteMQ-AI (via GitHub)" <gi...@apache.org>.
RockteMQ-AI commented on issue #2769:
URL: https://github.com/apache/rocketmq-dashboard/issues/2769#issuecomment-5464309816
**Issue Evaluation**
Category: `enhancement` | Status: **Evaluated**
After reviewing the current codebase, the browser storage identity parsing and auth metadata logic described in this issue **do not yet exist** in `apache/rocketmq-dashboard`. The frontend does not currently implement local identity storage with user ID and admin permission parsing from browser storage.
This appears to be a proposal for new auth identity validation functionality. If this is intended as an enhancement, it would need a design discussion about the auth model.
If you believe this code exists in a specific branch or PR, please share a link so we can locate it.
---
*Automated evaluation by github-manager-bot*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Reject corrupted identity metadata from browser storage [rocketmq-dashboard]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #2769: Reject corrupted identity metadata from browser storage
URL: https://github.com/apache/rocketmq-dashboard/issues/2769
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org