[PR] fix(metrics): redact data source credentials from config toString [rocketmq-dashboard]

["yyqdbngt (via GitHub)" <gi...@apache.org>]

yyqdbngt opened a new pull request, #3373:
URL: https://github.com/apache/rocketmq-dashboard/pull/3373

   ## Summary
   
   Marks `MetricsDataSourceConfig.password`/`bearerToken` as `@ToString.Exclude` and adds `MetricsDataSourceConfigTest` locking the contract.
   
   Coverage:
   - `toString` keeps the non-secret fields (`name`, `url`) while omitting both credential field names and values;
   - `@Data` equality/hashCode still cover the credentials, so a rotated token is not equal.
   
   ## Why
   
   The raw config model holds credentials that are encrypted only at rest; logs and debug output must not surface them through `toString`.
   
   ## Testing
   
   `mvn -B test -Dtest=MetricsDataSourceConfigTest` — 2/2 pass; checkstyle (validate) clean.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(metrics): redact data source credentials from config toString [rocketmq-dashboard]

["lizhimins (via GitHub)" <gi...@apache.org>]

lizhimins closed pull request #3373: fix(metrics): redact data source credentials from config toString
URL: https://github.com/apache/rocketmq-dashboard/pull/3373


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org