[UNOMI-825] Hide some profile properties from context request when requirered is set to with all (*)

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: unomi-2.5.0
• Assignee: Unassigned
• Reporter: David Griffon
• Created: 16/Apr/24 05:34
• Updated: 31/May/24 08:32
• Resolved: 31/May/24 08:32

Description

To prevent access to all property names when such event is sent to the context endpoint:

{
	"requiredProfileProperties": [
		"*"
	],

	"events": [
		
	]
}

We need to introduce a mechanism that hides select profile properties in the response.

A new system tag is added at property type level named: concealed, when set the property is only returned if accessed directly.

Use cases

For a given property type myType with the system tag concealed
A profile with that property set only.
the following payload:

{
	"requiredProfileProperties": [
		"*"
	],
...

returns no property

{
	"requiredProfileProperties": [
		"myType"
	],
...

returns the property

{
	"requiredProfileProperties": [
                "*",
		"myType"
	],
...

returns the property