audit-external-apis

What problem does it solve?

It helps you audit integrations with external governmental and catalog APIs (Hacienda, ATV, CABYS) to reduce failures caused by missing timeouts, incorrect retry behavior, weak error handling, or mishandling credentials.

Core Features & Use Cases

• HTTP call mapping: Scans the codebase for HTTP requests (requests.get/post/put/patch/delete), timeout configuration, and retry logic.
• Resilience verification: Checks HTTP error handling for rate limiting (429), server errors (5xx), and network exceptions (ConnectionError/Timeout), including backoff behavior.
• Credential safety audit: Verifies keyring usage and ensures there is no credential leakage via logging or hardcoded secrets.
• Use case: When the accounting system stops correctly validating fiscal status due to an API outage or throttling, run this audit to confirm the integration layer fails safely and securely.

Quick Start

Ask the auditor to review gestor_contable/core/xml_manager.py, gestor_contable/core/atv_client.py, and gestor_contable/core/cabys_manager.py for timeouts, retries, HTTP error handling, and credential handling, then produce an explicit findings report.