Skip to content

feat(ipa): Add sensitive fields guidance in IPA-111 and OpenAPI markings in IPA-117#77

Draft
AgustinBettati wants to merge 1 commit into
mainfrom
CLOUDP-412562-ipa-111-117-sensitive-fields
Draft

feat(ipa): Add sensitive fields guidance in IPA-111 and OpenAPI markings in IPA-117#77
AgustinBettati wants to merge 1 commit into
mainfrom
CLOUDP-412562-ipa-111-117-sensitive-fields

Conversation

@AgustinBettati

Copy link
Copy Markdown
Member

Formalizes how secret-carrying fields (passwords, API keys, credentials) are modeled.

  • IPA-111 — Sensitive Fields (new subsection): sensitive fields must follow the write-only or reveal-once pattern; a masked display (****, last-4) must be modeled as a separate read-only redacted sibling property, never sharing the raw field's name.
  • IPA-117 — Sensitive Field Markings (new subsection): use format: password on properties whose value is itself a secret; do not use it on redacted sibling properties.

Ticket: CLOUDP-412562

@AgustinBettati AgustinBettati force-pushed the CLOUDP-412562-ipa-111-117-sensitive-fields branch from 00bb50c to c620d81 Compare June 17, 2026 20:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant