redpanda-data / redpanda-data/connect
Returning the raw input configuration without expanded interpolations in HTTP Benthos streams API
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 8.8k
- Forks
- 969
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 64
Description
Scenery:
I have created some environment variables that are passwords, which I use in the stream, and it works perfectly.
But when I call .../streams/stream_name, this endpoint returns the password I used from environment variable as part of the stream.
An idea to solve this problem is to return the streams as it was sent in the POST to create it.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the HTTP streams API endpoint for GET /streams/stream_name and trace how its configuration response is assembled. Verify how environment-variable interpolations are represented, then confirm that the endpoint preserves the submitted configuration without exposing expanded password values.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- api, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100