OY-4954 Remove non-anonymized application secrets

Opetushallitus · Jan 28, 2025 · 8aecacb · 8aecacb
1 parent 3eb4e78
commit 8aecacb
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/dev-resources/sql/anonymizer-application-queries.sql b/dev-resources/sql/anonymizer-application-queries.sql
@@ -64,6 +64,9 @@ WHERE group_answer_values.application_id = :application_id AND
 -- name: sql-application-secret-ids
 SELECT id FROM application_secrets;
 
+-- name: delete-non-anonymized-secrets!
+DELETE FROM application_secrets WHERE NOT EXISTS(SELECT NULL FROM applications a WHERE a.key = application_key);
+
 -- name: sql-update-multi-by-key!
 UPDATE multi_answer_values SET value = :val WHERE key = :key;
 

diff --git a/dev/clj/ataru/anonymizer/anonymizer_application_store.clj b/dev/clj/ataru/anonymizer/anonymizer_application_store.clj
@@ -79,4 +79,6 @@
                                    SET secret = ?
                                    WHERE id = ?"]
                                  (map vector (repeatedly (fn [] (crypto/url-part 34))) id-chunk))
-                           {:multi? true}))))
+                           {:multi? true}))
+    (log/info "Removing non-anonymized application secrets")
+    (delete-non-anonymized-secrets! {} {:connection connection})))