Skip to content

feat(sentry-apps): hide clientSecret in 1 day after creation #69289

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Apr 22, 2024

Conversation

oioki
Copy link
Member

@oioki oioki commented Apr 19, 2024

Follow-up on #69015 #69115

@oioki oioki requested review from ykamo001 and mdtro April 19, 2024 09:54
@oioki oioki requested a review from a team as a code owner April 19, 2024 09:54
@github-actions github-actions bot added the Scope: Backend Automatically applied to PRs that change backend components label Apr 19, 2024
Copy link

codecov bot commented Apr 19, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 79.71%. Comparing base (d58bf44) to head (7301001).

❗ Current head 7301001 differs from pull request most recent head 9dc8b83. Consider uploading reports for the commit 9dc8b83 to get more accurate results

Additional details and impacted files
@@             Coverage Diff             @@
##           master   #69289       +/-   ##
===========================================
+ Coverage   62.76%   79.71%   +16.95%     
===========================================
  Files        6461     6431       -30     
  Lines      286611   286015      -596     
  Branches    49414    49300      -114     
===========================================
+ Hits       179891   228007    +48116     
+ Misses     106292    57571    -48721     
- Partials      428      437        +9     
Files Coverage Δ
src/sentry/api/serializers/models/sentry_app.py 100.00% <100.00%> (ø)

... and 2194 files with indirect coverage changes

@@ -91,13 +94,14 @@ def serialize(self, obj, attrs, user, access):
is_active_superuser(env.request) or is_active_staff(env.request)
)
if elevated_user or owner.id in user_org_ids:
has_secret = obj.date_added > timezone.now() - timedelta(days=1)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: I think show_secret might be a better name for this, because that's what this is helping determine and holding the value of right?

@oioki oioki enabled auto-merge (squash) April 22, 2024 19:31
@oioki oioki merged commit 5d785d6 into master Apr 22, 2024
48 checks passed
@oioki oioki deleted the feat/sentry-app-hide-clientsecret-after-1day branch April 22, 2024 19:50
@github-actions github-actions bot locked and limited conversation to collaborators May 8, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Scope: Backend Automatically applied to PRs that change backend components
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants