Skip to content

Feature/server detection#95

Open
VanDelinea wants to merge 4 commits into
mainfrom
feature/server-detection
Open

Feature/server detection#95
VanDelinea wants to merge 4 commits into
mainfrom
feature/server-detection

Conversation

@VanDelinea

Copy link
Copy Markdown

Reduces the burst of unauthenticated health-check probes the Delinea Platform
WAF rate-limits to 403, by detecting a server's type (Secret Server vs.
Platform) at most once per base_url per process — and lets callers skip
detection entirely. Also patches outstanding dependency advisories.

refs 734475.

VanDelinea and others added 3 commits June 8, 2026 12:13
Authorizer now memoizes the /api/v1/healthcheck + /health probe result in a
process-scoped, thread-safe class cache keyed by normalized base_url, so
detection fires once per base_url per process instead of on every authorizer
construction. Closes the unauthenticated-probe burst that the Delinea Platform
WAF rate-limits to 403 under Ansible token-auth lookups.

- successes only are cached; detection failures re-probe
- per-instance _server_type still set on cache hit (SecretServer + _refresh read it)
- adds first offline unit tests (tests/test_server_detection_cache.py)

Addresses 728859
@snyk-io

snyk-io Bot commented Jun 23, 2026

Copy link
Copy Markdown

Snyk checks have failed. 5 issues have been found so far.

Status Scan Engine Critical High Medium Low Total (5)
Open Source Security 0 5 0 0 5 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants