-
Notifications
You must be signed in to change notification settings - Fork 9
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CP-1104 Add noCredentials
config option.
#6
Conversation
General InformationTicket(s): CP-1104 SOC 1 Checklist
RM Checklist
Additional InformationReviewers: dustinlessard-wf, jayudey-wf, maxwellpeterson-wf, trentgrover-wf Automatically Identified Dependencies: smithy not yet complete
Last updated on Wednesday, November 11 04:20 PM CST |
+1 |
noCredentials
config option.
+1 |
XHRCorsObject(method, url, payload, {noCredentials, headers} ) { | ||
Timer.run(() =>_start(method, url, payload, noCredentials: false)); | ||
XHRCorsObject(method, url, {headers, noCredentials, payload}) { | ||
Timer.run(() =>_start(method, url, payload, noCredentials: noCredentials != null ? noCredentials : false)); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think you can use this null aware op for this bit -> x ?? y : z
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
if i read that right -> noCredentials: noCredentials ?? false
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Currently this project has an SDK constraint of >=1.0.0 <2.0.0
. If we still want to try to PR this into the main one, that would be a breaking change. I'm okay with doing it though, especially if we just end up using this fork
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
let's skip it for now
+1 unless you want to change the null aware bit |
@jayudey-wf ready for merge after #3 |
noCredentials
config option.noCredentials
config option.
QA Resource Approval: +10
Merging into master. |
CP-1104 Add `noCredentials` config option.
Infosec has requested a security review on this pull request @evanweible-wf @jayudey-wf @maxwellpeterson-wf can you please coordinate that? |
|
@michaeldavis-wf @richklein-wf @chadknight-wf could one of you provide a security review of this? |
+1 security |
Depends on #3
Issue
withCredentials
is false)Changes
Source:
withCredentials = true
Tests:
noCredentials
to true since they are not dealing with credentialsAreas of Regression
Testing
pub run dart_dev test --integration
passesCode Review
@trentgrover-wf
@maxwellpeterson-wf
@dustinlessard-wf
@jayudey-wf