Skip to content

[improve][broker] Give the detail msg when authencate error#25221

Open
Technoboy- wants to merge 1 commit intoapache:masterfrom
Technoboy-:fix-http-error-msg
Open

[improve][broker] Give the detail msg when authencate error#25221
Technoboy- wants to merge 1 commit intoapache:masterfrom
Technoboy-:fix-http-error-msg

Conversation

@Technoboy-
Copy link
Contributor

Motivation

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

@Technoboy- Technoboy- self-assigned this Feb 6, 2026
@Technoboy- Technoboy- added this to the 4.2.0 milestone Feb 6, 2026
@github-actions github-actions bot added the doc-not-needed Your PR changes do not impact docs label Feb 6, 2026
Copy link
Member

@lhotari lhotari left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@lhotari
Copy link
Member

lhotari commented Feb 6, 2026

/pulsarbot rerun-failure-checks

if (msg == null) {
msg = "Authentication required";
}
httpResponse.sendError(HttpServletResponse.SC_UNAUTHORIZED, msg);

Check warning

Code scanning / CodeQL

Information exposure through an error message Medium

Error information
can be exposed to an external user.
if (msg == null) {
msg = "Authentication required";
}
httpResponse.sendError(HttpServletResponse.SC_UNAUTHORIZED, msg);
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CodeQL flags a security issue here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants