Skip to content

Disable developer email and SMS inspection endpoints outside integration tests #1714

Closed

Description

@StuartFerguson

Goal

Prevent developer-only email and SMS inspection endpoints from being exposed by normal service deployments.

Context

/api/developer/lastemail and /api/developer/lastsms expose captured test messaging data.

Acceptance criteria

  • The endpoints are not mapped unless the environment is explicitly IntegrationTest or another dedicated test environment.
  • Production and staging requests cannot retrieve captured message contents.
  • Existing integration tests continue to inspect test messages through a test-only mechanism.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugsecurityCodacy security finding

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions