make inbound search a POST

that way it doesn't expose PII to our logs
This commit is contained in:
Leo Hemsted
2019-03-29 15:16:29 +00:00
parent c5208d712e
commit 53cdbad2cc
3 changed files with 6 additions and 11 deletions

View File

@@ -291,15 +291,13 @@ class ServiceAPIClient(NotifyAdminAPIClient):
def update_whitelist(self, service_id, data):
return self.put(url='/service/{}/whitelist'.format(service_id), data=data)
def get_inbound_sms(self, service_id, user_number='', page=None):
return self.get(
def get_inbound_sms(self, service_id, user_number=''):
# POST prevents the user phone number leaking into our logs
return self.post(
'/service/{}/inbound-sms'.format(
service_id,
),
params={
'user_number': user_number,
'page': page
}
data={'user_number': user_number}
)
def get_most_recent_inbound_sms(self, service_id, page=None):