mirror of
https://github.com/hcengineering/platform.git
synced 2026-10-19 14:31:43 +02:00
5077d97413
* fix(account): never log raw tokens, report only unexpected token failures getLoginInfoByToken and getLoginWithWorkspaceInfo logged the full token on every validation failure and reported each failure to Analytics, although expired or stale session tokens are routine. getWorkspacesInfo and updateLastVisit logged the token when rejecting a non-system caller. Log a keyed fingerprint instead of the credential (omitted when no server secret is configured) together with a fixed failure reason. A TokenError is logged at warn level and not reported to Analytics, as wrap() already treats it. Any other error is logged at error level and reported as a fresh error that carries only the error class name, never the original message, stack, cause or custom fields. Status codes and responses are unchanged. Signed-off-by: Michael Uray <michaeluray@users.noreply.github.com> * test(account): fix lint in token redaction tests Reference the mocked Analytics.handleError through one local jest.Mock per test file instead of passing the unbound method to expect(), which tripped @typescript-eslint/unbound-method in the formatting job. Signed-off-by: Michael Uray <michaeluray@users.noreply.github.com> --------- Signed-off-by: Michael Uray <michaeluray@users.noreply.github.com> Co-authored-by: Michael Uray <michaeluray@users.noreply.github.com>