conductor-oss / conductor-oss/csharp-sdk

Conductor-csharp PutSecret adds extra quotes to secret values

Open
#152 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
54
Forks
23
Avg merge
4d 21h
Merged PRs (30d)
2

Description

using conductor-csharp (SecretResourceApi.PutSecret / PutSecretWithHttpInfo) and secrets are stored with extra quotes (e.g., VERY SECRET becomes "VERY SECRET"), which makes them unusable for authentication.
In decompiled code, this line is used:
obj = ((body == null || !(body.GetType() != typeof(byte[]))) ? body : Configuration.ApiClient.Serialize(body));
For any non-null input, body is typed as string, so:
• body == null is false
• body.GetType() != typeof(byte[ ]) is true
• !(true) is false
• condition becomes false || false => false
So it always takes the Serialize(body) branch for string, which appears to force quote-wrapping.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with SecretResourceApi.PutSecret and PutSecretWithHttpInfo, then inspect the ApiClient serialization path described in the issue. Reproduce the request with a string secret and verify that the stored value is not wrapped in extra quotes and remains usable for authentication.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
api
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.