omnata-plugin-devkit 0.13.2a181__tar.gz → 0.13.2a182__tar.gz

{omnata_plugin_devkit-0.13.2a181 → omnata_plugin_devkit-0.13.2a182}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: omnata-plugin-devkit
-Version: 0.13.2a181
+Version: 0.13.2a182
 Summary: 
 License-File: LICENSE
 Author: James Weakley

{omnata_plugin_devkit-0.13.2a181 → omnata_plugin_devkit-0.13.2a182}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "omnata-plugin-devkit"
-version = "0.13.2a181"
+version = "0.13.2a182"
 description = ""
 authors = ["James Weakley <james.weakley@omnata.com>"]
 readme = "README.md"

{omnata_plugin_devkit-0.13.2a181 → omnata_plugin_devkit-0.13.2a182}/src/omnata_plugin_devkit/jinja_templates/RETRIEVE_SECRETS_UDF.sql.jinja

@@ -25,7 +25,7 @@ def run(oauth_secret_name,other_secrets_name):
                other_secrets_name
             )
             if len(secret_string_content) > 2:
-               other_secrets = json.loads(secret_string_content, strict=False)
+               other_secrets = json.loads(secret_string_content)
                connection_secrets = {
                   **connection_secrets,
                   **other_secrets,

{omnata_plugin_devkit-0.13.2a181 → omnata_plugin_devkit-0.13.2a182}/src/omnata_plugin_devkit/jinja_templates/SET_CONNECTION_OBJECTS.sql.jinja

@@ -77,6 +77,24 @@ try{
         return requireArrayOfStrings(key);
     }
     function esc(s){ return String(s).replace(/'/g, "''"); }
+    // JSON.stringify per spec must escape control characters in strings, but
+    // PEM-bearing values (RSA private keys with literal LF/CR line breaks) have
+    // produced stored secrets that strict json.loads rejects with
+    // "Invalid control character at...". Re-escape any control character that
+    // survives serialization so the stored secret is always strict-JSON-parseable.
+    function strictJsonStringify(v){
+        return JSON.stringify(v).replace(/[\x00-\x1f]/g, function(c){
+            switch(c){
+                case '\b': return '\\b';
+                case '\f': return '\\f';
+                case '\n': return '\\n';
+                case '\r': return '\\r';
+                case '\t': return '\\t';
+                default:
+                    return '\\u' + ('0000' + c.charCodeAt(0).toString(16)).slice(-4);
+            }
+        });
+    }
     function callProc(sql, binds){
         var rs = snowflake.createStatement({sqlText: sql, binds: binds}).execute();
         rs.next();
@@ -261,7 +279,7 @@ try{
             seedSecrets[k] = connectionSecrets[k];
         });
     }
-    callProc(`call PLUGIN.CREATE_GENERIC_SECRET_OBJECT(?, ?)`, [otherSecretsFqn, JSON.stringify(seedSecrets)]);
+    callProc(`call PLUGIN.CREATE_GENERIC_SECRET_OBJECT(?, ?)`, [otherSecretsFqn, strictJsonStringify(seedSecrets)]);
 
     // (7) External Access Integration.
     var eaiRules = [networkRuleFqn];