aiondemand / aiondemand/AIOD-rest-api
AIBuilder connector: complete mapping for version/distribution/license and prevent token leakage in URLs
- Langage dominant
- Python
- Étoiles
- 36
- Forks
- 77
- Métriques de merge des PR
- Aucune PR mergée en 30 j
Description
## Problem
The AIBuilder MLModel connector has partial mapping and a security concern:
- `version`, `distribution`, and `license` are marked TODO and are not fully mapped.
- Connector requests include `apiToken` in query URLs, and URL handling risks exposing sensitive token values in error paths/logging.
- The connector currently underuses available artifact metadata from AIBuilder responses.
## Affected files
- `src/connectors/aibuilder/aibuilder_mlmodel_connector.py`
- `src/connectors/aibuilder/aibuilder_mappings.py`
- `src/tests/connectors/aibuilder/test_aibuilder_mlmodel_connector.py`
## Expected behavior
1. `version` should be mapped when available (fallback from artifacts if needed).
2. `distribution` should be built from AIBuilder `artifacts`.
3. `license` should be mapped when provided.
4. token values must never appear in stored URLs or error messages.
5. connector tests should verify all the above.
## Proposed solution
- Add missing mapping keys in `aibuilder_mappings.py`.
- Implement robust distribution conversion from `artifacts` -> `RunnableDistribution`.
- Use a public token-free `same_as` URL for saved resources.
- Sanitize token from error URL messages.
- Add/update tests to assert:
- mapped `version`
- mapped `distribution`
- token-free `same_as`
- sanitized error messages
Guide de contribution
Ouvrir le guide de contribution
Évaluation
Cette issue n'a pas encore été évaluée.