Function subjectForExternalUser

admin/server/deployment.go:944–947

subjectForExternalUser generates a safe subject from an external user ID accessing a deployment in the specified project. The result is safe to use as a JWT subject and in telemetry (where we need to avoid collisions and PII).

(externalUserID, projectID string)

// subjectForExternalUser generates a safe subject from an external user ID accessing a deployment in the specified project.
// The result is safe to use as a JWT subject and in telemetry (where we need to avoid collisions and PII).
func subjectForExternalUser(externalUserID, projectID string) string {
	hash := sha256.Sum256([]byte(externalUserID + projectID))
	return "ext_" + hex.EncodeToString(hash[:])
}