Krish Dholakia 72bbdfd3f3 (security) Responses API - prevent User A from retrieving User B's response, if response.id is leaked (#15757) ...

* feat(responses_id_security.py): encrypt response.id - prevent user A from retrieving user B's response

additional security for retrievals on shared accounts

Closes LIT-1307

* feat(responses_id_security.py): allow admin to disable responses id security check

* test: add initial unit testing

* feat(responses_id_security.py): add streaming support

* docs: document new param

* docs: document new param

* feat(responses_id_security.py): add team id checks - ensure it works for service accounts

prevent service accounts keys from different teams from accessing each other's responses

more secure

* test: add unit testing

* fix: fix linting error

2025-10-25 13:41:59 -07:00

..

my-website

(security) Responses API - prevent User A from retrieving User B's response, if response.id is leaked (#15757)

2025-10-25 13:41:59 -07:00