Microsoft/bcquality
1
0
Fork 0
mirror of https://github.com/microsoft/BCQuality.git synced 2026-08-06 17:36:53 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Correct security and privacy knowledge guidance (#92)

Browse source 
* Correct security and privacy guidance

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9c2eebc4-dcd5-4b85-8113-90772d818900

* Address security privacy review findings

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9c2eebc4-dcd5-4b85-8113-90772d818900

---------

Co-authored-by: Jesper Schulz-Wedde <jesper.schulzwedde@microsoft.com>
This commit is contained in:
Jesper Schulz-Wedde 2026-07-14 11:25:03 +02:00 • committed by GitHub
parent bfda67a95a
commit aca3986fd0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
34 changed files with 192 additions and 153 deletions
Download patch file Download diff file Expand all files Collapse all files

20
microsoft/knowledge/security/secrettext-with-httpclient.good.al
View file

@ -3,26 +3,32 @@ codeunit 50209 "Sec Sample SecretHttp Good"
procedure CallApiWithSecretUri(ApiKey: SecretText)
var
HttpClient: HttpClient;
Request: HttpRequestMessage;
Response: HttpResponseMessage;
SecretUri: SecretText;
begin
SecretUri := SecretStrSubstNo('https://api.example.com/data?key=%1', ApiKey);
HttpClient.SetSecretRequestUri(SecretUri);
HttpClient.Get('', Response);
Request.Method := 'GET';
Request.SetSecretRequestUri(SecretUri);
HttpClient.Send(Request, Response);
end;
procedure CallApiWithBearer(BearerToken: SecretText)
procedure CallApiWithAccessToken(AccessToken: SecretText)
var
HttpClient: HttpClient;
Request: HttpRequestMessage;
Response: HttpResponseMessage;
Headers: HttpHeaders;
AuthHeader: SecretText;
AuthorizationHeaderMissingErr: Label 'Authorization header missing.';
begin
AuthHeader := SecretStrSubstNo('Bearer %1', BearerToken);
Headers := HttpClient.DefaultRequestHeaders();
Request.Method := 'GET';
Request.SetRequestUri('https://api.example.com/data');
Request.GetHeaders(Headers);
AuthHeader := SecretStrSubstNo('Token %1', AccessToken);
Headers.Add('Authorization', AuthHeader);
if not Headers.ContainsSecret('Authorization') then
Error('Authorization header missing');
HttpClient.Get('https://api.example.com/data', Response);
Error(AuthorizationHeaderMissingErr);
HttpClient.Send(Request, Response);
end;
}