# Test case generation

### Connection Secrets

The VCR.py recording attempts to automatically redact any connection secrets included in HTTP payloads, specifically:

* All *Authorization* and *x-api-key* headers
* Parts of the HTTP body which match the value of any connection secret

Depending on how the secrets are used the HTTP request, it's still possible that they end up in the VCR cassette (yaml file). For peace of mind, it's best to check the file yourself to see whether it contains any sensitive information.