From the docs it looks like storage.x behaves exactly the same as storage.xSecret. Other than the secret version being encrypted (I assume) is there any reason why I should use the non-secret version anymore now? Am I doing something wrong if I store all my “normal” data via the new method? What are the implications? It would be nice if you could add some documentation regarding this.
Thanks for posting. The secret APIs on storage is specifically meant to store secrets. While nothing is stopping us from using it to store general-purpose data today, in the future, we are looking at adding features into this API that is meant only for secrets like API keys. Which may impact the app if there are general-purpose data being stored in secret storage.
I had connect on forge App working on v1.6.1
However after updating the forge-cli to version 2.0.1 , the connect modules are not getting displayed, although the App is getting installed without any issues after I add the below lines in the App manifest
connect:
key: app-key
remote: connect
Are there any issues with Forge CLI v2.0.1 with Connect on forge ?
thanks for your answer! While I appreciate your response, I’ll have to tell you that it didn’t really answer my question at the level of detail I was hoping for.
Of course, I personally understand that I shouldn’t be storing my non-sensitive data using the new secrets API, but there may be many who don’t. (i.e.: If you don’t make it 100% clear why developers shouldn’t do this, you’ll likely see some doing this very soon) It would be great if you could add at least some high-level information to the documentation about what functionality you expect to build here and in what explicit way, shape, or form apps will be impacted by this functionality if they store non-sensitive data using this API.
Let me know if you need my manifiest or atlassian-connect to debug the issue…
With cli 1.6.1, the app key would be appended with a UUID , but with the latest release 2.0.1, I dont see that happening… Not sure if its related to the issue I am facing… The forge install works , and I see the connect App also installed in the cloud instance… but the UI modules ( in my case web-items in jira.software.board.tools ) is missing
It is more about the difference in the purpose of the two APIs. The secrets API on storage is meant to store secrets and in the future, we will be adding features to this API that are meant only for storing secrets like, API keys. To enhance security stories around them. For example, currently, the secrets stored using storage.setSecret are not queried when running storage.query API.
Please see the public issue for an update. It includes a workaround, which is to let us know your app ID so we can let you know your app’s randomly-generated key, in order to set app.connect.key to match.
ADDED - linter support for the connectModules property to the Forge CLI
UPDATED - Forge CLI install upgrade warning
)