Normalize key-id case in the API-key verifier generation guard (R21-G13) #173

Open
opened 2026-11-06 15:24:56 -05:00 by dohertj2 · 0 comments
Owner

The CachingApiKeyVerifier generation guard depends on key-id case. Latent only.

Source: archreview/2026-10-21/remediation/00-tracking.md row R21-G13

Next step (from the tracker): Normalize the key id (ordinal-ignore-case) at the guard and add a test.

Current-state evidence: the row is still Open/Deferred in the latest (2026-10-21) tracker, and a code check on local main @ 8c0a51d (2026-11-06) found it still present unless noted below.

The `CachingApiKeyVerifier` generation guard depends on key-id case. Latent only. Source: `archreview/2026-10-21/remediation/00-tracking.md` row R21-G13 Next step (from the tracker): Normalize the key id (ordinal-ignore-case) at the guard and add a test. Current-state evidence: the row is still `Open`/`Deferred` in the latest (2026-10-21) tracker, and a code check on local `main` @ `8c0a51d` (2026-11-06) found it still present unless noted below.
dohertj2 added the area:authtype:review-findingpriority:p3migrated labels 2026-11-06 15:24:56 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dohertj2/mxaccessgw#173