Unleash / unleash / 29822311720

87%

master: 91%

Build Type

push

github

Committed by web-flow

Commit Message

api-token v2, secure storage

This adds a new type of api token which no longer stores the full secret
in the database.
We're keeping the `project:environment.` prefix so we don't need to
update our SDKs, but the <secret> part is now `v2_identifier_secret`,
where the identifier will be used to get the correct token from the
database and then we do
`sha256(`project:environment.v2_identifier_secret`)` and match this
against what is stored in the verifier column for the token.

We will no longer store the full token in the database, but we'll store
the hash of the token in the row identified by the <identifier>.

This means the only time our users will see the full api token is when
they create them. They can no longer be copied from the api-token list.

Coverage Stats

1962 of 2164 branches covered (90.67%)

139 of 176 new or added lines in 9 files covered. (78.98%)

18 existing lines in 5 files now uncovered.

15658 of 17925 relevant lines covered (87.35%)

606.16 hits per line