- Add a primary defaultCacheManager with a two-hour entry TTL
- Add a named longTermCacheManager with a one-day entry TTL
- Replace the hand-rolled RedisTemplate read/write and midnight-TTL
logic in DailyPasswordManager with a @Cacheable annotation
- Remove six imports left dead by the above
- Wrap the upstream call so connection and HTTP failures surface
as 502 Bad Gateway instead of unhandled exceptions
- Return 502 Bad Gateway when the upstream payload is empty
- Expire the cached password at midnight rather than after 24 hours
siujamo