Skip to content

fix: redact API key in exception error paths - #80

Open
franciscbalint wants to merge 8 commits into
masterfrom
fix/redact-api-key-exceptions-f06
Open

franciscbalint wants to merge 8 commits into
masterfrom
fix/redact-api-key-exceptions-f06

Conversation

@franciscbalint

@franciscbalint franciscbalint commented Oct 17, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

  • API key redaction in exception messages (existing branch scope).

Priority 2 — real-time AI scoring

  • scoreEmail / scoreEmailPost for /v2/scoring.

Priority 3 — bulk finder, list evaluator, filters, S3

  • Bulk email finder: sendEmailFinderFile / stream, status, get, delete (bulkapi…/email-finder/*).
  • Bulk domain search: sendDomainSearchFile / stream, status, get, delete (…/domain-search/*).
  • List evaluator: sendListEvaluatorFile / stream, getListEvaluatorResult, sendEvaluatedFile.
  • Custom filters: addFilter, listFilters (GET or POST), deleteFilter.
  • S3: validateS3File, scoreS3File, exportS3File (bulkapi root).

Test plan

  • ./mvnw test

franciscbalint and others added 8 commits October 18, 2026 00:36
Mask the configured API key in catch-path messages before surfacing them via
ErrorResponse, matching Python and Go SDK behavior.

Co-authored-by: Cursor <cursoragent@cursor.com>
Add validateWithOptions / validateBatchWithOptions and activity fields on ZBValidateResponse.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Add bulk email finder, domain search, list evaluator, custom filters, and S3 bulk helpers aligned with JS/Python reference SDKs.

Co-authored-by: Cursor <cursoragent@cursor.com>
Add form-encoded POST option on single validate (alongside GET) and GET
listS3files on bulkapi root, with unit tests and API parity doc updates.
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Callers were getting raw access-denied pages, parser text, or a successful validateBatch when the account itself was rejected. An offline fake API now covers every public method, and each client keeps its own key.

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant