chore(e2e): fingerprint resolved-config diagnostic to dodge secret masking (BUNYIP-167) #188

Merged

nrupard merged 1 commit from chore/BUNYIP-167-fingerprint-masked-inputs into main

2026-06-22 21:05:59 +02:00

nrupard commented

2026-06-22 20:59:27 +02:00

Owner

The BUNYIP-167 config diagnostic printed baseURL/email/tenant/OIDC in plaintext, but they are registered Forgejo secrets so Forgejo masked them as *** - hiding the host + email we need to check. Print each as a fingerprint (len + sha256[:12]) instead; the derived hash dodges masking and keeps secrets out of the log. Compare to the expected value hash.\n\ntsc clean. Temporary (BUNYIP-167).\n\n#BUNYIP-167

The BUNYIP-167 config diagnostic printed baseURL/email/tenant/OIDC in plaintext, but they are registered Forgejo secrets so Forgejo masked them as `***` - hiding the host + email we need to check. Print each as a fingerprint (len + sha256[:12]) instead; the derived hash dodges masking and keeps secrets out of the log. Compare to the expected value hash.\n\ntsc clean. Temporary (BUNYIP-167).\n\n#BUNYIP-167

nrupard added 1 commit

2026-06-22 20:59:27 +02:00

chore(e2e): fingerprint the resolved-config diagnostic to dodge secret masking

E2E / Playwright against deployment (pull_request) Failing after 1m34s

Details

Check / fmt + clippy + build + tests (pull_request) Successful in 6m31s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

2d09ada6b9

The BUNYIP-167 diagnostic printed baseURL/email/tenant/OIDC values in plaintext, but those are all registered Forgejo Actions secrets, so Forgejo masked them as `***` in the log - hiding the two inputs (host + email) we actually need to verify. Print every input as a fingerprint (length + sha256[:12]) instead; a derived hash dodges the masking and still keeps the secret out of the log. Compare each to the expected value's hash (e.g. `'e2e-user@a8n.run' | hash sha256`).

tsc --noEmit clean. Still temporary; remove with the rest of BUNYIP-167.

#BUNYIP-167

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

nrupard scheduled this pull request to auto merge when all checks succeed

2026-06-22 21:00:32 +02:00