strongmind-platform-sdk 3.34.2 → 3.34.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '028ca313c6f9bce49fb5b02e6f929b2ed0939f191938d450d5433647e6ef644b'
-  data.tar.gz: 71e0174a2f1929f7acad9727f71c4286ba9791b5f02a0a011a23485de2d22886
+  metadata.gz: 9b82e33dd88733dca1da0a516c00342899c1227c4301dd4dfd8394aeca5e292a
+  data.tar.gz: 53de61789c363e674b4df379ce42aa33b77b2f0f49fffd49173b82f146b8e382
 SHA512:
-  metadata.gz: fc53e003fdc583a4afc1c0ea2cd8e4253a23f44f38d08849b2d56c2a57d625e876cadb668df2bbbbdc705ef2d0b57362462baf27336f9fa05e337841b321aebc
-  data.tar.gz: b4a08cd44666bbc7c467afc211f92084b55942609231d121b04e3bee5078a6577be028b0556e8352d080f1695be0055e582250f59775db58a73d607a92c18e9a
+  metadata.gz: b12297b6fbe2837bdb9bad307b2035e2f9c3942a1b4d61f27ee81e4638fdb1dfd30d8f92fe64c31ad5f893d4daa7276bf018d72c06d8eb0b2898752d0cad6596
+  data.tar.gz: a63f3b1704854273bd724bcbf69058b1436008f483505481f8f4f1a7d018dac8464d12ee341074fbfe0878f30f3bf5abae542070705a5e035069264fedf8cbde

data/CHANGELOG.md

@@ -1,5 +1,6 @@
 ## [Unreleased]
 
+- Stop logging Identity error response bodies. IS4 answers a create that collides on the username unique index with SQL Server's raw message, which includes the duplicate value (a student's name and SIS id), and the error log line carried that body verbatim. The log line now has the exception class, method, path and status only. The raised error still carries the response, with its request scrubbed, for a consumer that decides it is safe to inspect.
 - Raise typed errors from every Canvas error branch. The read/list/PUT-write methods raised bare `RuntimeError` strings, which consumers could not distinguish from a bug — Central's grade-passback retry wrapper, for example, only retries `CanvasClientError` and so treated every throttled read as fatal. All error branches now raise through one handler: 404 → `MissingModuleItemError`, 401 → `UnauthorizedError`, rate-limited → `RateLimitedError` (new), anything else → `CanvasClientError`. Every class subclasses `CanvasClientError` (itself a `StandardError`), so rescues written against the old classes keep working; only code matching on `RuntimeError` specifically (none known) would notice. Message text changed (see below); no known consumer parses it.
 - Stop echoing raw Canvas response bodies and page query strings into error messages. Consumers persist `error.message` (Central's `OutcomeLog.exception_message`) and forward it to Sentry, and a raw body from a submission, quiz or roster endpoint can carry student records (FERPA). Every error path now shares one message policy: `"<descriptor>: <Canvas's own error messages> (status: N, host: H)"`, with a fixed `unparseable Canvas error body` / `empty Canvas error body` / `Canvas rate limit exceeded` descriptor in place of any body that isn't a JSON error object. The write-path tail (`handle_post_response_errors`) previously appended the whole body and skipped the `error_messages_from` hardening; it now goes through the same builder. Pagination failures name the page path only, dropping the query that carries `as_user_id`/`student_id`. The raw body and status are still available as `CanvasClientError#response_body` and `#status` for a consumer that decides it is safe to inspect.
 - `error_messages_from` also reads a hash-shaped `errors` (field => messages, as Canvas validation errors return) and a top-level `message` key, instead of producing an inspect blob or nothing.

data/lib/platform_sdk/identity/error_handleable.rb

@@ -30,7 +30,6 @@ module PlatformSdk
           exception: exception_class.name.split('::').last,
           method: error.response.dig(:request, :method),
           path: error.response.dig(:request, :url_path),
-          response_body: error.response[:body],
           status: error.response[:status]
         }.compact
       end

data/lib/platform_sdk/version.rb

@@ -3,7 +3,7 @@
 module PlatformSdk
   MAJOR = 3
   MINOR = 34
-  PATCH = 2
+  PATCH = 3
 
   VERSION = "#{PlatformSdk::MAJOR}.#{PlatformSdk::MINOR}.#{PlatformSdk::PATCH}".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongmind-platform-sdk
 version: !ruby/object:Gem::Version
-  version: 3.34.2
+  version: 3.34.3
 platform: ruby
 authors:
 - Platform Team
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-10-22 00:00:00.000000000 Z
+date: 2026-10-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64