gtuk/diga-api-service

Handling of requests containing test codes

SebastianRehfeldt opened this issue · 2 comments

SebastianRehfeldt commented

Sending test codes using this service makes sense to me to try out the different api endpoints and also to test integrations of this service. However, in production setups it might be better to disallow sending requests with test codes. Potential solutions:

  • have a setting which disables sending requests for test codes
  • returning is_test_code in the api responses so it can be handled at caller side.
gtuk commented

Really good point. I already had on my internal roadmap. I will most likely go with a setting that is configurable through the env variables to disable test codes

  • 👍1
gtuk commented

DISABLE_TESTCODES env variable can be set now. Default value is true