make inbound search a POST

that way it doesn't expose PII to our logs
This commit is contained in:
Leo Hemsted
2019-03-29 15:16:29 +00:00
parent c5208d712e
commit 53cdbad2cc
3 changed files with 6 additions and 11 deletions

View File

@@ -19,7 +19,7 @@ class NotificationApiClient(NotifyAdminAPIClient):
to=None,
include_one_off=None,
):
# TODO: if "to" is included, this should be a POST
params = {
'page': page,
'page_size': page_size,

View File

@@ -291,15 +291,13 @@ class ServiceAPIClient(NotifyAdminAPIClient):
def update_whitelist(self, service_id, data):
return self.put(url='/service/{}/whitelist'.format(service_id), data=data)
def get_inbound_sms(self, service_id, user_number='', page=None):
return self.get(
def get_inbound_sms(self, service_id, user_number=''):
# POST prevents the user phone number leaking into our logs
return self.post(
'/service/{}/inbound-sms'.format(
service_id,
),
params={
'user_number': user_number,
'page': page
}
data={'user_number': user_number}
)
def get_most_recent_inbound_sms(self, service_id, page=None):