Skip to content

prevent 0xa api_key suffix in api_key #16223

Closed as not planned
Closed as not planned

Description

@ohmayr

Determine this is the right repository

  • I determined this is the correct repository in which to report this bug.

Summary of the issue

if a 0xa character appears at the end of
the api_key, the underlying grpc implementation
will fail with an invalid value header error.

see: https://gitlab.uni-hannover.de/tci-gateway-module/grpc/-/blob/v1.9.x/src/core/lib/surface/validate_metadata.cc#L84

to reproduce this, simply add a 0xa character to an api_key and try to perform any generative action via grpc transport.

Related PR for more context: #13963.

Activity

  1. added
    type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.
    triage meI really want to be triaged.
    priority: p2Moderately-important priority. Fix may not be included in next release.
    and removed
    triage meI really want to be triaged.
    on Jun 23, 2025
  2. added
    type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.
    priority: p2Moderately-important priority. Fix may not be included in next release.
    on Jun 23, 2025
  3. parthea commented on Mar 26, 2026

    @parthea
    Contributor

    Transferring to google-cloud-python as the code for gapic-generator will be migrated there.

  4. daniel-sanche commented on May 27, 2026

    @daniel-sanche
    Contributor

    This issue is being closed as part of a bulk review (Filter #1). Please reopen if you believe this is still relevant and requires action.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

priority: p2Moderately-important priority. Fix may not be included in next release.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions