-
Notifications
You must be signed in to change notification settings - Fork 110
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
refactor: use CheckAuthorization instead of IsAuthorized #2319
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm from draft perspective, it seems all calls are equivalent, it is just on api level?
Yes , the new function returns an error instead of bool , and accepts different params |
!!!WARNING!!! Be very careful about using Only suppress a single rule (or a specific set of rules) within a section of code, while continuing to scan for other problems. To do this, you can list the rule(s) to be suppressed within the #nosec annotation, e.g: /* #nosec G401 */ or //#nosec G201 G202 G203 Pay extra attention to the way |
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## develop #2319 +/- ##
===========================================
- Coverage 68.72% 68.66% -0.06%
===========================================
Files 302 302
Lines 19169 19153 -16
===========================================
- Hits 13174 13152 -22
- Misses 5348 5351 +3
- Partials 647 650 +3
|
Restructuting the tests so that for every message the lines of code look like
This would improve readability as the message would be declared right before its used. The change is only cosmetic however and the pr review can be started before I push those changes in |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In general throughout the code, I think it would be cleaner to use one-liner for if checks:
err := k.GetAuthorityKeeper().CheckAuthorization(ctx, msg)
if err != nil {
return false, errorsmod.Wrap(authoritytypes.ErrUnauthorized, err.Error())
}
to
if err := k.GetAuthorityKeeper().CheckAuthorization(ctx, msg); err != nil {
return false, errorsmod.Wrap(authoritytypes.ErrUnauthorized, err.Error())
}
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
@kingpinXD please check related issues are attached when opening the PR |
|
GitGuardian id | GitGuardian status | Secret | Commit | Filename | |
---|---|---|---|---|---|
11759679 | Triggered | Generic High Entropy Secret | e53c8c3 | cmd/zetae2e/local/accounts.go | View secret |
🛠 Guidelines to remediate hardcoded secrets
- Understand the implications of revoking this secret by investigating where it is used in your code.
- Replace and store your secret safely. Learn here the best practices.
- Revoke and rotate this secret.
- If possible, rewrite git history. Rewriting git history is not a trivial act. You might completely break other contributing developers' workflow and you risk accidentally deleting legitimate data.
To avoid such incidents in the future consider
- following these best practices for managing and storing secrets including API keys and other credentials
- install secret detection on pre-commit to catch secret before it leaves your machine and ease remediation.
🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.
Description
This pr refactors the codebase to use the
CheckAuthorization
function instead of the the olderIsAuthorized
Closes: #2153
#2247
Type of change
How Has This Been Tested?
Please describe the tests that you ran to verify your changes. Include instructions and any relevant details so others can reproduce.
Checklist: