Fix preflight cache key token collisions

edmundmiller · edmundmiller · commit 266688c640f3 · 2026-04-24T10:02:30.000-05:00
diff --git a/lib/SeqeraApi.groovy b/lib/SeqeraApi.groovy
@@ -36,7 +36,11 @@ class SeqeraApi {
     }
 
     static void validateApiAccess(String apiEndpoint, Map headers, String tokenEnvVar, String token) {
-        def validationKey = "${apiEndpoint}|${tokenEnvVar}|${token.hashCode()}"
+        def tokenDigest = java.security.MessageDigest.getInstance('SHA-256')
+            .digest(token.getBytes('UTF-8'))
+            .collect { String.format('%02x', it) }
+            .join()
+        def validationKey = "${apiEndpoint}|${tokenEnvVar}|${tokenDigest}"
         if (validatedApiSessions.contains(validationKey)) {
             return
         }

Original file line number	Diff line number	Diff line change
`@@ -36,7 +36,11 @@ class SeqeraApi {`
`36`	`36`	`}`
`37`	`37`
`38`	`38`	`static void validateApiAccess(String apiEndpoint, Map headers, String tokenEnvVar, String token) {`
`39`		`- def validationKey = "${apiEndpoint}\|${tokenEnvVar}\|${token.hashCode()}"`
	`39`	`+ def tokenDigest = java.security.MessageDigest.getInstance('SHA-256')`
	`40`	`+ .digest(token.getBytes('UTF-8'))`
	`41`	`+ .collect { String.format('%02x', it) }`
	`42`	`+ .join()`
	`43`	`+ def validationKey = "${apiEndpoint}\|${tokenEnvVar}\|${tokenDigest}"`
`40`	`44`	`if (validatedApiSessions.contains(validationKey)) {`
`41`	`45`	`return`
`42`	`46`	`}`