Logflare / logflare / 33111458706-1

83%

Build Type

push

github

Committed by web-flow

Commit Message

feat: Add optional read-only user/password config options for ClickHouse backends (#3870)

* adds optional read-only user/password config options for ClickHouse backends

* fix: don't leak clickhouse query_password into the edit form DOM

The edit form rendered the decrypted query_password value directly into
the LiveView HTML, exposing the ClickHouse read-only credential to anyone
inspecting the page. Blank the field on render and, when a blank value is
submitted, keep the existing stored password instead of overwriting it
with an empty string.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* refactored `preserve_blank_query_password` to operate on the changeset; fixed a bug where clearing the query user couldnt fully revoke the password

* docs: fix truncated pre_ingest/3 doc sentence

A truncated fragment ("To disable the check, set the `max_event_age_") was
left above the intact sentence when the doc was added in #3764.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* require new query_password on query_user change; do not block provisioning on read credential failures

---------

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

Coverage Stats

33 of 35 new or added lines in 3 files covered. (94.29%)

2 existing lines in 2 files now uncovered.

14518 of 17689 relevant lines covered (82.07%)

1860.23 hits per line