-
Notifications
You must be signed in to change notification settings - Fork 143
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(core): move kratos e2e tests and delete e2e dir #3943
Conversation
|
GitGuardian id | GitGuardian status | Secret | Commit | Filename | |
---|---|---|---|---|---|
8533381 | Triggered | Generic High Entropy Secret | 1cb8283 | core/api/test/unit/domain/authentication/index.spec.ts | View secret |
8533381 | Triggered | Generic High Entropy Secret | 1cb8283 | core/api/test/e2e/servers/kratos.spec.ts | View secret |
8533381 | Triggered | Generic High Entropy Secret | ca20f97 | core/api/test/unit/services/kratos/identity.spec.ts | View secret |
8533381 | Triggered | Generic High Entropy Secret | ca20f97 | core/api/test/unit/domain/authentication/index.spec.ts | View secret |
8533382 | Triggered | Generic High Entropy Secret | 1cb8283 | core/api/test/e2e/servers/kratos.spec.ts | View secret |
8533382 | Triggered | Generic High Entropy Secret | 1cb8283 | core/api/test/e2e/servers/kratos.spec.ts | View secret |
8533382 | Triggered | Generic High Entropy Secret | 1cb8283 | core/api/test/unit/domain/authentication/index.spec.ts | View secret |
8533382 | Triggered | Generic High Entropy Secret | 1cb8283 | core/api/test/unit/domain/authentication/index.spec.ts | View secret |
8533382 | Triggered | Generic High Entropy Secret | ca20f97 | core/api/test/unit/domain/authentication/index.spec.ts | View secret |
8533382 | Triggered | Generic High Entropy Secret | ca20f97 | core/api/test/unit/services/kratos/identity.spec.ts | View secret |
8533382 | Triggered | Generic High Entropy Secret | ca20f97 | core/api/test/unit/services/kratos/identity.spec.ts | View secret |
8533382 | Triggered | Generic High Entropy Secret | ca20f97 | core/api/test/unit/domain/authentication/index.spec.ts | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secrets safely. Learn here the best practices.
- Revoke and rotate these secrets.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
Our GitHub checks need improvements? Share your feedbacks!
eda5671
to
f66247b
Compare
b02b98e
to
ca09d52
Compare
ca09d52
to
9535eb7
Compare
98f7fbc
to
d6c3899
Compare
d6c3899
to
6de586f
Compare
6de586f
to
99d1594
Compare
@@ -87,7 +87,7 @@ export LOG_LEVEL="info" | |||
|
|||
export KRATOS_MASTER_USER_PASSWORD="passwordHardtoFindWithNumber123" | |||
export KRATOS_PG_HOST="localhost" | |||
export KRATOS_PG_PORT="5433" | |||
export KRATOS_PG_PORT="5432" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I dont see changes in docker compose.. are you sure about this?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh right, this assumes we now target tilt deps and not docker-compose deps anymore. It's probably irrelevant since we're planning to find a way to remove .env and have all the things we would normally need for local dev come through buck either way.
We have some cleaning up of docs, deps, envs and local workflows to do after this PR
@@ -88,7 +88,7 @@ export LOG_LEVEL="info" | |||
export KRATOS_MASTER_USER_PASSWORD="passwordHardtoFindWithNumber123" | |||
export KRATOS_ADMIN_URL="http://localhost:4434" | |||
export KRATOS_PG_HOST="localhost" | |||
export KRATOS_PG_PORT="5433" | |||
export KRATOS_PG_PORT="5432" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
same here
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@@ -35,6 +35,20 @@ export const getSupportedCountries = ({ | |||
return countries | |||
} | |||
|
|||
export const getNextPageToken = (link: string): string | undefined => { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is specific to service implementation, should not be in the core domain
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Moved ca20f97
@@ -24,21 +24,39 @@ type IdentityPhone = IdentityBase & { | |||
phone: PhoneNumber | |||
email: undefined | |||
emailVerified: undefined | |||
|
|||
username?: undefined |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
maybe I am missing something but kratos is not updated when the user sets the username.. so do we have a process syncing this?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is different. It's added to IdentityPhone
/IdentityEmail
/IdentityPhoneEmail
just to satisfy the AnyIdentity
interface and it really only has meaning in IdentityDeviceAccount
where the type is IdentityUsername
and not our user's account usernames
No description provided.