You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@rocketmq.apache.org by "Aias00 (via GitHub)" <gi...@apache.org> on 2026/08/18 14:28:20 UTC
[I] [Studio][Bug] Synchronize browser auth state after policy and password changes [rocketmq-dashboard]
Aias00 opened a new issue, #2351:
URL: https://github.com/apache/rocketmq-dashboard/issues/2351
## Problem\nDisabling login protection leaves a stale Reader role in browser state, continuing to disable writes. Changing the current user's password revokes the server session but leaves the browser visually authenticated until a later 401.\n\n## Scope\nClear or refresh the client auth store on policy changes and self-password changes, with UI regression tests.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Studio][Bug] Synchronize browser auth state after policy and password changes [rocketmq-dashboard]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #2351:
URL: https://github.com/apache/rocketmq-dashboard/issues/2351#issuecomment-5418732486
This issue has been automatically closed because there has been no activity for 7 days. If you believe this issue is still relevant, please reopen it with updated information.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Studio][Bug] Synchronize browser auth state after policy and password changes [rocketmq-dashboard]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #2351: [Studio][Bug] Synchronize browser auth state after policy and password changes
URL: https://github.com/apache/rocketmq-dashboard/issues/2351
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Studio][Bug] Synchronize browser auth state after policy and password changes [rocketmq-dashboard]
Posted by "RockteMQ-AI (via GitHub)" <gi...@apache.org>.
RockteMQ-AI commented on issue #2351:
URL: https://github.com/apache/rocketmq-dashboard/issues/2351#issuecomment-5330161700
**Issue Evaluation**
Category: `bug` | Status: **Confirmed**
Valid bug. Two related auth state synchronization issues: (1) disabling login protection leaves stale Reader role in browser state; (2) changing password revokes server session but browser stays visually authenticated until a later 401. Both need client auth store refresh/clear on policy and password changes.
**Severity:** medium — security-adjacent UX issue, can confuse users about their actual permissions.
**Impact:** Auth state consistency after admin operations.
---
*Automated evaluation by @RockteMQ-AI*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org