stacklok / toolhive / 18524365296

59%

Build Type

push

github

Committed by web-flow

Commit Message

Secure OAuth client secret storage and prevent API exposure (#2204)

* fix: secure OAuth client secret storage and prevent API exposure

- Implement secure client secret storage using secret references
- Convert plain text CLI secrets to secure secret manager references
- Add CLI format string support for secret parameters
- Centralize OAuth client secret processing across all entry points
- Add comprehensive unit tests for utility functions
- Prevent plain text secret exposure in API responses

Fixes security vulnerability where OAuth client secrets were stored
as plain text and exposed in API responses.

* secure OAuth client secret storage and prevent API exposure

- Implement secure client secret storage using secret references
- Convert plain text CLI secrets to secure secret manager references
- Add CLI format string support for secret parameters
- Centralize OAuth client secret processing across all entry points
- Add comprehensive unit tests for utility functions
- Prevent plain text secret exposure in API responses

Fixes security vulnerability where OAuth client secrets were stored
as plain text and exposed in API responses.

Run Details

27 of 167 new or added lines in 7 files covered. (16.17%)

2 existing lines in 1 file now uncovered.

17721 of 37893 relevant lines covered (46.77%)

15.94 hits per line