cubeops: reject an empty JWT signing secret - #1374

Open

dwin-gharibi wants to merge 5 commits into

TencentCloud:masterfrom

dwin-gharibi:fix/cubeops-empty-jwt-secret

Commits on Aug 18, 2026

fix(CubeOps/internal/store/db.go): fixing up the rejecting an empty JWT signing secret
dwin-gharibi
committed
808f704
test(CubeOps/internal/auth/jwt_empty_secret_test.go): adding up some amazing tests for covering the fixed bug
dwin-gharibi
committed
d612c33
test(CubeOps/internal/auth/jwt_empty_secret_test.go): forge tokens with the empty key and cover the bootstrap guard
dwin-gharibi
committed
9a5973c
fix(CubeOps/internal/store/db.go): repair an empty JWT secret row and reject whitespace-only secrets
dwin-gharibi
committed
c424a9a
test(CubeOps/internal/store/jwt_secret_bootstrap_test.go): cover repair, convergence and whitespace secrets
dwin-gharibi
committed
334a57a