divviup / divviup-api / 24201844075

69%

Build Type

push

github

Committed by web-flow

Commit Message

Increase collector credential token entropy to 256 bits (#2190)

* Redact secrets in Auth0Client, Token, and TokenWithExpiry Debug output

Use educe to derive Debug on Auth0Client, Token, and TokenWithExpiry
with sensitive fields (secret, token, access_token) omitted. This
prevents accidental credential disclosure if these structs are ever
debug-formatted in logs or error messages.

* Increase collector credential token entropy to 256 bits

Change token generation from 16 bytes (128 bits) to 32 bytes
(256 bits) for consistency with API tokens. Both are hashed with
SHA-256, so the token should be at least as wide as the hash output.

Also fix missing ssrf_validation_enabled field in config test.

Coverage Stats

1 of 1 new or added line in 1 file covered. (100.0%)

1 existing line in 1 file now uncovered.

4070 of 7155 relevant lines covered (56.88%)

59.09 hits per line