openedx / openedx/openedx-authz
Bug: get_subclass_by_namespaced_key doesn't validate
Open
@bmtcril is already working on this.
Since May 28, 2026.
- Dominant language
- Python
- Stars
- 0
- Forks
- 9
- Avg merge
- 13d 9h
- Merged PRs (30d)
- 9
Description
Found this as part of the tightening / hardening pass I'm doing. ScopeMeta.get_subclass_by_external_key calls validate_external_key before returning, we should continue this pattern in get_subclass_by_namespaced_key as a precaution and fast fail in case a malformed makes it through. This keeps our API guarantees consistent and helps prevent confusing upstream errors when other code tries to use a bogus generated class.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.