Correct security and privacy guidance

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9c2eebc4-dcd5-4b85-8113-90772d818900
This commit is contained in:
Jesper Schulz-Wedde 2026-07-14 10:45:42 +02:00
parent 7a678d1aff
commit ec8f891954
34 changed files with 189 additions and 150 deletions

View file

@ -3,26 +3,32 @@ codeunit 50209 "Sec Sample SecretHttp Good"
procedure CallApiWithSecretUri(ApiKey: SecretText)
var
HttpClient: HttpClient;
Request: HttpRequestMessage;
Response: HttpResponseMessage;
SecretUri: SecretText;
begin
SecretUri := SecretStrSubstNo('https://api.example.com/data?key=%1', ApiKey);
HttpClient.SetSecretRequestUri(SecretUri);
HttpClient.Get('', Response);
Request.Method := 'GET';
Request.SetSecretRequestUri(SecretUri);
HttpClient.Send(Request, Response);
end;
procedure CallApiWithBearer(BearerToken: SecretText)
var
HttpClient: HttpClient;
Request: HttpRequestMessage;
Response: HttpResponseMessage;
Headers: HttpHeaders;
AuthHeader: SecretText;
AuthorizationHeaderMissingErr: Label 'Authorization header missing.';
begin
Request.Method := 'GET';
Request.SetRequestUri('https://api.example.com/data');
Request.GetHeaders(Headers);
AuthHeader := SecretStrSubstNo('Bearer %1', BearerToken);
Headers := HttpClient.DefaultRequestHeaders();
Headers.Add('Authorization', AuthHeader);
if not Headers.ContainsSecret('Authorization') then
Error('Authorization header missing');
HttpClient.Get('https://api.example.com/data', Response);
Error(AuthorizationHeaderMissingErr);
HttpClient.Send(Request, Response);
end;
}