Skip to content

Conversation

@briskt
Copy link
Contributor

@briskt briskt commented Sep 16, 2025

Fixed

  • Removed unused containers from the Docker Compose configuration.
  • Removed incorrect note from the open API spec.
  • Removed CDK from the Dockerfile since it's not actually used. The CI/CD workflow doesn't use Compose for deployment.
  • Don't return error details in authentication response.
    • Before: "unable to authenticate request: failed to validate api key: hash does not match plaintext: crypto/bcrypt: hashedPassword is not the hash of the given password"
    • After: "Unauthorized"

@briskt briskt requested review from a team as code owners September 16, 2025 10:47
@briskt briskt requested review from devon-sil, ethancanne and hobbitronics and removed request for a team September 16, 2025 10:47
@sonarqubecloud
Copy link

Copy link
Contributor

@jason-jackson jason-jackson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good

err := bcrypt.CompareHashAndPassword([]byte(k.HashedSecret), []byte(given))
if err != nil {
return err
return fmt.Errorf("hash does not match plaintext (hash: %s) (plaintext: %v...): %w",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Alternatively (I'm fine with current):

Suggested change
return fmt.Errorf("hash does not match plaintext (hash: %s) (plaintext: %v...): %w",
return fmt.Errorf("hash `%s` does not match plaintext `%v...`: %w",

user, err := mfa.AuthenticateRequest(r)
if err != nil {
http.Error(w, fmt.Sprintf("unable to authenticate request: %s", err), http.StatusUnauthorized)
log.Printf("unable to authenticate request: %s", err)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
log.Printf("unable to authenticate request: %s", err)
log.Println("unable to authenticate request:", err)

Base automatically changed from route-refactor to develop September 17, 2025 13:20
@briskt briskt merged commit dc59029 into develop Sep 17, 2025
6 checks passed
@briskt briskt deleted the misc branch September 17, 2025 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants