1
62%
main: 62%

Ran 20 Jul 2026 08:00AM UTC

Files 127

Run time 3s

Badge

Embed ▾

Committed 20 Jul 2026 07:51AM UTC coverage: 62.429% (+0.3%) from 62.167%

Job # 29725936637.1

Build Type

Pull #582

github

Committed by

lucasmenendez

Commit Message

fix(jobs): keep member-import error PII off the public job endpoint

The public GET /jobs/{jobId} builds its response via JobResponseFromDB, which
surfaces job.Errors. For member-import jobs those strings embed raw member data
— plaintext email (db/org_members.go), plaintext phone, and the birthdate
(internal.ParseBirthDate) — so anyone holding a leaked jobId could read member
PII with no auth (an authorization downgrade introduced when the endpoint moved
to the unified job shape).

Clear the errors array for import job types on the public single-job endpoint;
the Manager/Admin-gated GET /jobs list keeps full detail (admins uploaded the
data and need the failing value to fix their import). tx-job errors are chain
failures with no PII and are unaffected. Adds a test asserting the public
endpoint omits the errors while the auth list retains them.

Pull Request Pull Request #582: chore(api): /processes migration cleanup — deprecations, RESTful shapes, jobs/apikeys consolidation, param standardization

Coverage Stats

11796 of 18895 relevant lines covered (62.43%)

45.45 hits per line

vocdoni / saas-backend / 29725936637 / 1
62%
main: 62%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 29725936637.1

vocdoni / saas-backend / 29725936637 / 1 62% main: 62%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 29725936637.1

vocdoni / saas-backend / 29725936637 / 1
62%
main: 62%

README BADGES
x