)]}'
{
  "commit": "c2f7f49db33251283f11f98a77e569b66ce86375",
  "tree": "83c3ebaa82b6a60183b4cfb610ebeb71651dceb4",
  "parents": [
    "41ffbe42d8a20c6b7d8a78c12f8738924e5da7bf"
  ],
  "author": {
    "name": "vBMC Team",
    "email": "vbmc-dev@google.com",
    "time": "Wed Aug 26 14:44:36 2026 -0700"
  },
  "committer": {
    "name": "Copybara-Service",
    "email": "copybara-worker@google.com",
    "time": "Wed Aug 26 14:45:37 2026 -0700"
  },
  "message": "BEGIN_PUBLIC\nPrevent DoS and thread starvation in Redfish session token refresh.\n\nRedfishSessionAuthPlugin held the main mutex across synchronous network\ncalls during token refresh, which could block all proxy threads.\n\nThis change separates the network refresh logic from the state mutex using a\ndedicated fetch mutex. It also adds a 15-second cooldown and double-checked\nlocking to prevent repeated forced refreshes from causing thread starvation.\nEND_PUBLIC\n\nPiperOrigin-RevId: 971512071\nChange-Id: Ieaf8c6d172105d930b8dcd0831bd9e09104d8203\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "7b5f615c2611073b4680760f8123f72bfce71fff",
      "old_mode": 33188,
      "old_path": "redfish_session_auth.cc",
      "new_id": "b6dcb8a9aa322ee75668835ceacfb3ff3c6ebdda",
      "new_mode": 33188,
      "new_path": "redfish_session_auth.cc"
    },
    {
      "type": "modify",
      "old_id": "6c139d1aeca24a1f8bc82f473bd3430fcd71afa9",
      "old_mode": 33188,
      "old_path": "redfish_session_auth.h",
      "new_id": "d01a017d77822598f146fb0586b41cd8a55949d9",
      "new_mode": 33188,
      "new_path": "redfish_session_auth.h"
    },
    {
      "type": "modify",
      "old_id": "470f006fda551377e625a2663d059eaea0a399a9",
      "old_mode": 33188,
      "old_path": "redfish_session_auth_test.cc",
      "new_id": "646b6350d3963ba62b9ffd6c28c6d55edbed15ba",
      "new_mode": 33188,
      "new_path": "redfish_session_auth_test.cc"
    }
  ]
}