Skip to content

AIBuilder connector: complete mapping for version/distribution/license and prevent token leakage in URLs #709

@ziad-ashraf7

Description

@ziad-ashraf7

Problem

The AIBuilder MLModel connector has partial mapping and a security concern:

  • version, distribution, and license are marked TODO and are not fully mapped.
  • Connector requests include apiToken in query URLs, and URL handling risks exposing sensitive token values in error paths/logging.
  • The connector currently underuses available artifact metadata from AIBuilder responses.

Affected files

  • src/connectors/aibuilder/aibuilder_mlmodel_connector.py
  • src/connectors/aibuilder/aibuilder_mappings.py
  • src/tests/connectors/aibuilder/test_aibuilder_mlmodel_connector.py

Expected behavior

  1. version should be mapped when available (fallback from artifacts if needed).
  2. distribution should be built from AIBuilder artifacts.
  3. license should be mapped when provided.
  4. token values must never appear in stored URLs or error messages.
  5. connector tests should verify all the above.

Proposed solution

  • Add missing mapping keys in aibuilder_mappings.py.
  • Implement robust distribution conversion from artifacts -> RunnableDistribution.
  • Use a public token-free same_as URL for saved resources.
  • Sanitize token from error URL messages.
  • Add/update tests to assert:
    • mapped version
    • mapped distribution
    • token-free same_as
    • sanitized error messages

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions