root
70a64e3709
Freeze the running offline FUT backend into version control as fifa17-recon/docker/fifa17-python/ - declarative and rebuildable from a fresh checkout: * OPENFUT_BIND / OPENFUT_ADVERTISE client/server split in the responders (lsx, blaze, roster, utas, pow) + entrypoint.sh; OPENFUT_ADVERTISE is required for remote mode (compose and entrypoint fail without it) * docker-compose.yml reproducing the frozen baseline container exactly (env, ports incl. the 8085->8080 POW-content remap, /state bind, restart) * .env.example / .env for site config - the LAN IP is never hardcoded in source * tools/ + data/ staged from openfut-fut-backend:python-baseline-2026-08-10, verified byte-identical to the running container at freeze time * client_arm.sh (the 105 client-side arming counterpart) * Dockerfile bakes /app/SHA256SUMS.txt so any image is self-identifying * docs/BASELINE-python-2026-08-10.md: frozen image/container/hash record, restore instructions and rebuild-equivalence procedure Secrets (redir key/cert, .env) and runtime state (docker/state) stay gitignored. The live container is untouched pending the .105 launcher audit.
38 lines
1.2 KiB
Python
38 lines
1.2 KiB
Python
#!/usr/bin/env python3
|
|
"""Regression: ordinary UTAS diagnostics never expose session credentials."""
|
|
import importlib
|
|
import os
|
|
import sys
|
|
import tempfile
|
|
|
|
TOOLS = os.path.dirname(os.path.abspath(__file__))
|
|
if TOOLS not in sys.path:
|
|
sys.path.insert(0, TOOLS)
|
|
|
|
CANARY = "OPENFUT_UTAS_CANARY_SECRET"
|
|
|
|
|
|
def main():
|
|
with tempfile.TemporaryDirectory() as state:
|
|
os.environ["FUT_ACCOUNT_PATH"] = os.path.join(state, "active_account.json")
|
|
os.environ["FUT_PROFILE_ROOT"] = os.path.join(state, "accounts")
|
|
os.environ["FUT_LOG"] = os.path.join(state, "utas.log")
|
|
os.environ.pop("FUT_PROFILE", None)
|
|
|
|
import utas_server
|
|
importlib.reload(utas_server)
|
|
|
|
for name in ("X-UT-SID", "Authorization", "Cookie", "Set-Cookie"):
|
|
rendered = utas_server.safe_header_for_log(name, CANARY)
|
|
assert rendered == "[REDACTED]", (name, rendered)
|
|
assert CANARY not in rendered
|
|
|
|
assert utas_server.safe_header_for_log("Content-Type", "application/json") == "application/json"
|
|
assert utas_server.safe_header_for_log("X-Request-Id", "status-0") == "status-0"
|
|
|
|
print("UTAS header redaction: PASS")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|