Skip to content

Mask private access tokens in stack traces in automated failure reports

  1. QA failure issue - gitlab-org/gitlab#36916 (closed) (token has been revoked) - looks like it's been resolved with QA::Runtime::API::Request.masked_url(url) since then, however need to double check.
 Resource at https://staging.gitlab.com/api/v4/projects/gitlab-qa-user1%2Fproject-archive-download-14667b25ae99e2b5?private_token=XXXXXXXX could not be found (404): `{"message":"404 Project Not Found"}`.
     #   ./qa/resource/api_fabricator.rb:69:in `api_get_from'

  2) API basics user creates a project with a file and deletes them afterwards
  1. QA failure report in test case issue - gitlab-org/quality/testcases#1971 (comment 811117091) (token has been revoked)

Error:

URI::InvalidURIError: bad URI(is not URI?): "https://staging.gitlab.com/api/v4/projects/6767884\nLavp?private_token=XXXXXXX"