rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Disable Clerk access-review connector

Browse Source 
Clerk's Backend API secret key only exposes the customer's application
end-users (GET /v1/users) -- the people who sign into the customer's
product -- not the Clerk workspace/dashboard team who administer the
platform. Those admins have no Backend API and are managed only in the
Clerk Dashboard UI. So an access-review campaign against Clerk reviews
the wrong population entirely (verified in prod: one source paginating
16K+ end-users), which is a compliance defect, not just the pagination
timeouts it also caused.

Unregister Clerk from the builtin provider registry and drop its driver,
provider registration, tests, and cassette so it can no longer be added
or fetched. Keep the ConnectorProviderClerk enum value, its IsValid
membership, the GraphQL enum value, and the frontend logo so existing
stored CLERK connectors still validate, serialize, and display (users
can still see and remove them). Drop it from ConnectorProviders so the
registry stays in sync with the registered set.

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
This commit is contained in:
Aurélien Sibiril
2026-07-22 12:22:13 +02:00
parent 0da9e3c5c4
commit 60d373e5c4
7 changed files with 34 additions and 503 deletions
Download Patch File Download Diff File Expand all files Collapse all files

61
pkg/coredata/connector_provider.go
View File

@@ -58,32 +58,40 @@ const (
ConnectorProviderAsana ConnectorProvider = "ASANA"
ConnectorProviderNetlify ConnectorProvider = "NETLIFY"
ConnectorProviderClickUp ConnectorProvider = "CLICKUP"
ConnectorProviderClerk ConnectorProvider = "CLERK"
ConnectorProviderVercel ConnectorProvider = "VERCEL"
ConnectorProviderMonday ConnectorProvider = "MONDAY"
ConnectorProviderMetabase ConnectorProvider = "METABASE"
ConnectorProviderTailscale ConnectorProvider = "TAILSCALE"
ConnectorProviderAnthropic ConnectorProvider = "ANTHROPIC"
ConnectorProviderCursor ConnectorProvider = "CURSOR"
ConnectorProviderDatadog ConnectorProvider = "DATADOG"
ConnectorProviderOkta ConnectorProvider = "OKTA"
ConnectorProviderZendesk ConnectorProvider = "ZENDESK"
ConnectorProviderQovery ConnectorProvider = "QOVERY"
ConnectorProviderRender ConnectorProvider = "RENDER"
ConnectorProviderNeon ConnectorProvider = "NEON"
ConnectorProviderMercury ConnectorProvider = "MERCURY"
ConnectorProviderApollo ConnectorProvider = "APOLLO"
ConnectorProviderDeepgram ConnectorProvider = "DEEPGRAM"
ConnectorProviderClickHouse ConnectorProvider = "CLICKHOUSE"
ConnectorProviderLangfuse ConnectorProvider = "LANGFUSE"
ConnectorProviderPylon ConnectorProvider = "PYLON"
ConnectorProviderOpenRouter ConnectorProvider = "OPENROUTER"
ConnectorProviderIncidentIO ConnectorProvider = "INCIDENT_IO"
ConnectorProviderBrevo ConnectorProvider = "BREVO"
ConnectorProviderScaleway ConnectorProvider = "SCALEWAY"
ConnectorProviderYousign ConnectorProvider = "YOUSIGN"
ConnectorProviderRailway ConnectorProvider = "RAILWAY"
ConnectorProviderCrisp ConnectorProvider = "CRISP"
// ConnectorProviderClerk is retained for existing connectors but is
// no longer a registerable access-review provider: Clerk's Backend API
// (secret key) only exposes the customer's application end-users, not
// the Clerk workspace/dashboard team who administer the platform, so a
// campaign reviews the wrong population. Kept in IsValid and the
// GraphQL enum so stored CLERK rows still validate and serialize;
// dropped from ConnectorProviders and unregistered from the builtin
// registry so it cannot be added or fetched.
ConnectorProviderClerk ConnectorProvider = "CLERK"
ConnectorProviderVercel ConnectorProvider = "VERCEL"
ConnectorProviderMonday ConnectorProvider = "MONDAY"
ConnectorProviderMetabase ConnectorProvider = "METABASE"
ConnectorProviderTailscale ConnectorProvider = "TAILSCALE"
ConnectorProviderAnthropic ConnectorProvider = "ANTHROPIC"
ConnectorProviderCursor ConnectorProvider = "CURSOR"
ConnectorProviderDatadog ConnectorProvider = "DATADOG"
ConnectorProviderOkta ConnectorProvider = "OKTA"
ConnectorProviderZendesk ConnectorProvider = "ZENDESK"
ConnectorProviderQovery ConnectorProvider = "QOVERY"
ConnectorProviderRender ConnectorProvider = "RENDER"
ConnectorProviderNeon ConnectorProvider = "NEON"
ConnectorProviderMercury ConnectorProvider = "MERCURY"
ConnectorProviderApollo ConnectorProvider = "APOLLO"
ConnectorProviderDeepgram ConnectorProvider = "DEEPGRAM"
ConnectorProviderClickHouse ConnectorProvider = "CLICKHOUSE"
ConnectorProviderLangfuse ConnectorProvider = "LANGFUSE"
ConnectorProviderPylon ConnectorProvider = "PYLON"
ConnectorProviderOpenRouter ConnectorProvider = "OPENROUTER"
ConnectorProviderIncidentIO ConnectorProvider = "INCIDENT_IO"
ConnectorProviderBrevo ConnectorProvider = "BREVO"
ConnectorProviderScaleway ConnectorProvider = "SCALEWAY"
ConnectorProviderYousign ConnectorProvider = "YOUSIGN"
ConnectorProviderRailway ConnectorProvider = "RAILWAY"
ConnectorProviderCrisp ConnectorProvider = "CRISP"
)
var (
@@ -123,7 +131,6 @@ func ConnectorProviders() []ConnectorProvider {
ConnectorProviderAsana,
ConnectorProviderNetlify,
ConnectorProviderClickUp,
ConnectorProviderClerk,
ConnectorProviderVercel,
ConnectorProviderMonday,
ConnectorProviderMetabase,