vocdoni / saas-backend / 29725936637

62%

main: 62%

Build Type

Pull #582

github

Committed by lucasmenendez

Commit Message

fix(jobs): keep member-import error PII off the public job endpoint

The public GET /jobs/{jobId} builds its response via JobResponseFromDB, which
surfaces job.Errors. For member-import jobs those strings embed raw member data
— plaintext email (db/org_members.go), plaintext phone, and the birthdate
(internal.ParseBirthDate) — so anyone holding a leaked jobId could read member
PII with no auth (an authorization downgrade introduced when the endpoint moved
to the unified job shape).

Clear the errors array for import job types on the public single-job endpoint;
the Manager/Admin-gated GET /jobs list keeps full detail (admins uploaded the
data and need the failing value to fix their import). tx-job errors are chain
failures with no PII and are unaffected. Adds a test asserting the public
endpoint omits the errors while the auth list retains them.

Pull Request Pull Request #582: chore(api): /processes migration cleanup — deprecations, RESTful shapes, jobs/apikeys consolidation, param standardization

Coverage Stats

344 of 550 new or added lines in 19 files covered. (62.55%)

3 existing lines in 2 files now uncovered.

11796 of 18895 relevant lines covered (62.43%)

45.45 hits per line