Skip to content

Development#48

Merged
Doble-2 merged 4 commits into
mainfrom
development
Jun 16, 2026
Merged

Development#48
Doble-2 merged 4 commits into
mainfrom
development

Conversation

@Doble-2

@Doble-2 Doble-2 commented Jun 16, 2026

Copy link
Copy Markdown
Owner

No description provided.

angel and others added 4 commits June 15, 2026 19:52
#27)

- Change proxy_api_key and ai_api_key to pydantic SecretStr in AppSettings
  so model_dump()/repr() never expose raw key values.
- Refactor _build_proxy_url() to return (base_url, auth_tuple) instead of
  embedding credentials in the URL string.
- Use httpx.Proxy(url, auth=...) so credentials are never in exception
  messages, debug logs, or tracebacks.
- Update all consumers (agent_engine, ai_analyst, CLI, doctor) to use
  .get_secret_value() where the raw string is needed.
- Add 5 new SecretStr redaction tests verifying model_dump, repr, and
  URL string safety.

Closes #27
security: remove API key from proxy URL, use SecretStr for credential…
Without proxy_username, the endpoint is proxy.scrapingant.com (not
residential.scrapingant.com). Check 'residential' in auth username
instead of URL.
fix: correct auto-detect test assertion for API proxy endpoint
@Doble-2 Doble-2 merged commit 80e6966 into main Jun 16, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant