Test case generation

Connection Secrets

The VCR.py recording attempts to automatically redact any connection secrets included in HTTP payloads, specifically:

• All Authorization and x-api-key headers

• Parts of the HTTP body which match the value of any connection secret

Depending on how the secrets are used the HTTP request, it's still possible that they end up in the VCR cassette (yaml file). For peace of mind, it's best to check the file yourself to see whether it contains any sensitive information.