M-1: retrieve.py logged the live single-use code at INFO ('found code %s', 'code %s
skipped too old'), shipping the secret to any aggregation/retention sink the host wires
(our /srv/logs -> loki/grafana path). drop the code value from both lines — log that a
code was found/retrieved and where, never the value. also truncate the oauth token-endpoint
error body to 200 chars so a token response can't be dumped whole.
aiomail-F3: CLAUDE.md claimed an '8-case tested' suite that does not exist in the repo;
corrected to describe the manual throwaway-venv exercise + the real flake8 check.
verified by execution: code retrieved, value absent from logs; control confirms the old
line carried it.
Signed-off-by: disqualifier <dev@disqualifier.me>
20 lines
434 B
TOML
20 lines
434 B
TOML
[build-system]
|
|
requires = ["hatchling"]
|
|
build-backend = "hatchling.build"
|
|
|
|
[project]
|
|
name = "aiomail"
|
|
version = "0.1.5"
|
|
description = "async IMAP one-time-code retrieval with password/OAuth2 auth and dynamic matching"
|
|
requires-python = ">=3.10"
|
|
dependencies = [
|
|
"aioimaplib>=1.0",
|
|
"beautifulsoup4>=4.11",
|
|
]
|
|
|
|
[project.optional-dependencies]
|
|
oauth = ["aiohttp>=3.9"]
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["src/aiomail"]
|