{"action":"created","issue":{"url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng/issues/1025","repository_url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng","labels_url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng/issues/1025/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng/issues/1025/comments","events_url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng/issues/1025/events","html_url":"https://github.com/cloudfoundry/cloud_controller_ng/issues/1025","id":279452151,"number":1025,"title":"Compromising information in client message","user":{"login":"ashishjain14","id":11222204,"avatar_url":"https://avatars0.githubusercontent.com/u/11222204?v=4","gravatar_id":"","url":"https://api.github.com/users/ashishjain14","html_url":"https://github.com/ashishjain14","followers_url":"https://api.github.com/users/ashishjain14/followers","following_url":"https://api.github.com/users/ashishjain14/following{/other_user}","gists_url":"https://api.github.com/users/ashishjain14/gists{/gist_id}","starred_url":"https://api.github.com/users/ashishjain14/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ashishjain14/subscriptions","organizations_url":"https://api.github.com/users/ashishjain14/orgs","repos_url":"https://api.github.com/users/ashishjain14/repos","events_url":"https://api.github.com/users/ashishjain14/events{/privacy}","received_events_url":"https://api.github.com/users/ashishjain14/received_events","type":"User","site_admin":false},"labels":[{"id":762471259,"url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng/labels/feature-request","name":"feature-request","color":"7a56dd","default":false},{"id":240264792,"url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng/labels/unscheduled","name":"unscheduled","color":"D9D9D9","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2017-12-05T16:59:29Z","updated_at":"2018-03-11T07:19:19Z","closed_at":null,"author_association":"NONE","body":"## Issue\r\nOn a failed service creation the error message displays The IP:port and full path of the service\r\n\r\n## Context\r\nWhen trying to create a service instance, without having an entitlement, the message displayed in the client displays information that appears to be a security risk:\r\nThe service broker rejected the request to https://IP:9293/cf/v2/service_instances/691f1431-6fcd-4cbd-a3fb-d1510f0e675c?accepts_incomplete=true. Status Code: 403 Forbidden, Body:\r\n{\"status\":403,\"message\":\"Not entitled to create service instance\"}\r\n\r\nCurrently the error message displays The IP:port and full path of the service. \r\n\r\n## Steps to Reproduce\r\nCreate a instance which results in a failed creation\r\n## Expected result\r\nError message should just say \"message\":\"Not entitled to create service instance\" and error code.\r\n## Current result\r\nCurrently the error message displays The IP:port and full path of the service. \r\n## Possible Fix\r\nRemove uri from https://github.com/cloudfoundry/cloud_controller_ng/blob/173954d8ed2d2b9624d074ba2b277f7bd47c8432/lib/services/service_brokers/v2/errors/service_broker_request_rejected.rb#L15\r\n"},"comment":{"url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng/issues/comments/372094948","html_url":"https://github.com/cloudfoundry/cloud_controller_ng/issues/1025#issuecomment-372094948","issue_url":"https://api.github.com/repos/cloudfoundry/cloud_controller_ng/issues/1025","id":372094948,"user":{"login":"ashishjain14","id":11222204,"avatar_url":"https://avatars0.githubusercontent.com/u/11222204?v=4","gravatar_id":"","url":"https://api.github.com/users/ashishjain14","html_url":"https://github.com/ashishjain14","followers_url":"https://api.github.com/users/ashishjain14/followers","following_url":"https://api.github.com/users/ashishjain14/following{/other_user}","gists_url":"https://api.github.com/users/ashishjain14/gists{/gist_id}","starred_url":"https://api.github.com/users/ashishjain14/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ashishjain14/subscriptions","organizations_url":"https://api.github.com/users/ashishjain14/orgs","repos_url":"https://api.github.com/users/ashishjain14/repos","events_url":"https://api.github.com/users/ashishjain14/events{/privacy}","received_events_url":"https://api.github.com/users/ashishjain14/received_events","type":"User","site_admin":false},"created_at":"2018-03-11T07:19:19Z","updated_at":"2018-03-11T07:19:19Z","author_association":"NONE","body":"@anniesing @zrob any update on this ticket, as per the tracker currently this is not scheduled for implementation."}}
{"actor":{"display_login":"ashishjain14"}}