Paul Rastoin
57f13c9b92
# Introduction Prevent any cross user `connectedAccount` `connectionParamaters` leak Also encrypt in db all `connectionParameters` password Never return any password through `DTO` anymore The settings now allow update mutation without providing the password in edition mode Verified all `connectionParameters.password` interaction ## Integration tests - Added more coverage for both failing and successful paths - Introduced a new env var that allow bypass the provider connection test ## Legacy connected Account decryption support Stop allowing non encrypted decryption on `accessToken` and `refreshToken`, only allow legacy decryption on refactored `connectionParameters` ## Upsert ownership Completely got rid of the connected workspace schema context which is legacy Also now a user can only upsert a connected account for him only.. ## New UI <img width="1770" height="1852" alt="image" src="https://github.com/user-attachments/assets/55c1dc89-42ff-4084-95e2-cc5f9e23753b" /> If in edition the password is by default disabled It needs to be selected as being edited to be enabled ## Next - Refactor tool permissions flag not to include connected accounts - Remove the legacy connected standard object - Refactor and improve connected account resolver auth
32 lines
777 B
TypeScript
32 lines
777 B
TypeScript
import { gql } from 'graphql-tag';
|
|
import { makeMetadataAPIRequest } from 'test/integration/metadata/suites/utils/make-metadata-api-request.util';
|
|
|
|
export const deleteConnectedAccount = async ({
|
|
id,
|
|
expectToFail,
|
|
}: {
|
|
id: string;
|
|
expectToFail: boolean;
|
|
}) => {
|
|
const response = await makeMetadataAPIRequest({
|
|
query: gql`
|
|
mutation DeleteConnectedAccount($id: UUID!) {
|
|
deleteConnectedAccount(id: $id) {
|
|
id
|
|
}
|
|
}
|
|
`,
|
|
variables: { id },
|
|
});
|
|
|
|
if (expectToFail) {
|
|
expect(response.body.data?.deleteConnectedAccount).toBeNull();
|
|
|
|
return { errors: response.body.errors, data: null };
|
|
}
|
|
|
|
expect(response.body.errors).toBeUndefined();
|
|
|
|
return { errors: null, data: response.body.data.deleteConnectedAccount };
|
|
};
|