codeant-ai-for-open-source[bot] commented on PR #38075:
URL: https://github.com/apache/superset/pull/38075#issuecomment-3924541924
## **Sequence Diagram**
Shows how encrypted_extra fields are masked/unmasked using configurable
JSONPath paths (now supporting human-readable labels). The BaseEngineSpec
centralizes path extraction and calls redaction/reveal utilities during edit
and update flows.
```mermaid
sequenceDiagram
participant Client
participant Backend
participant BaseEngineSpec
participant RedactionUtil
Client->>Backend: Submit database edit (encrypted_extra)
Backend->>BaseEngineSpec: mask_encrypted_extra(encrypted_extra)
BaseEngineSpec->>RedactionUtil: redact_sensitive(config,
paths=encrypted_extra_sensitive_field_paths())
RedactionUtil-->>BaseEngineSpec: masked_config
BaseEngineSpec-->>Backend: masked_encrypted_extra (returned to client)
Backend->>BaseEngineSpec: unmask_encrypted_extra(old_encrypted_extra,
new_encrypted_extra)
BaseEngineSpec->>RedactionUtil: reveal_sensitive(old_config, new_config,
paths=encrypted_extra_sensitive_field_paths())
RedactionUtil-->>BaseEngineSpec: merged_config
BaseEngineSpec-->>Backend: new_encrypted_extra (with reused sensitive
values)
```
---
*Generated by [CodeAnt AI](https://codeant.ai)*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
