Repository navigation

[Fix][Security] Fix JWT authentication bypass via hardcoded secret and self-comparison logic - #579

Open

jackieya wants to merge 3 commits into

datavane:devfrom

jackieya:fix/jwt-auth-bypass

Open

[Fix][Security] Fix JWT authentication bypass via hardcoded secret and self-comparison logic#579
jackieya wants to merge 3 commits into
datavane:devfrom
jackieya:fix/jwt-auth-bypass

Commits on Apr 5, 2026
- [Fix][Security] Fix JWT authentication bypass via hardcoded secret and self-comparison logic
  jackieya
  committed
  0bf9681
- [Fix][Security] Add null guard for tokenPassword in validateToken to prevent NPE
  jackieya
  committed
  e540d6d
Commits on Apr 6, 2026
- [Fix][Build] Add missing jodd-core dependency to datavines-core module for BCrypt compilation
  jackieya
  committed
  30d7a77