Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: surface event if proxy token mismatches #14499

Merged

Conversation

miketheman
Copy link
Member

@miketheman miketheman commented Sep 6, 2023

If someone passes the proxy token and it doesn't match, we default to using the other block that pulls values off other headers.

Instead of allowing that, send a sentry and dump the request.

@miketheman miketheman force-pushed the miketheman/raise-if-token-mismatch branch 2 times, most recently from f6b6998 to 1e49beb Compare September 7, 2023 18:59
If someone passes the proxy token and it doesn't match, we default to
using the other block that pulls values off other headers.

Instead of allowing that, send a sentry and dump the request.

Signed-off-by: Mike Fiedler <miketheman@gmail.com>
@miketheman miketheman force-pushed the miketheman/raise-if-token-mismatch branch from 1e49beb to b8a0f0d Compare September 7, 2023 18:59
@miketheman miketheman marked this pull request as ready for review September 7, 2023 19:02
@miketheman miketheman requested a review from a team as a code owner September 7, 2023 19:02
@ewdurbin ewdurbin changed the title chore: raise error if proxy token mismatches chore: surface event if proxy token mismatches Sep 7, 2023
@miketheman miketheman merged commit 2d0e5ae into pypi:main Sep 7, 2023
17 checks passed
@miketheman miketheman deleted the miketheman/raise-if-token-mismatch branch September 7, 2023 19:16
@sentry-io
Copy link

sentry-io bot commented Sep 7, 2023

Suspect Issues

This pull request was deployed and Sentry observed the following issues:

  • ‼️ Invalid Proxy Token generic WSGI request View Issue

Did you find this useful? React with a 👍 or 👎

@ewdurbin
Copy link
Member

ewdurbin commented Sep 7, 2023

That was me validating ^, sorry.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants