You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We found in MixPanel a concerning number of events being published from builds that appear to come from non-production usage. Instead of relying on internal conventions with CCs while they develop/test in their own machines or when using PR builds, it's better to use separate MixPanel projects per environment.
Implementation
In MixPanel there are two projects we care about, production (named status-im) and test (named test.status-im).
We should inject two vars in the CI, MIXPANEL_APP_ID, MIXPANEL_TOKEN. Only release builds should use the production project, and all the rest should use the test project. The vars values are not secrets https://developer.mixpanel.com/reference/project-token, and actually the MixPanel token can be exploited, as is the case for analytics tools integrated with clients.
We could make the Status Proxy handle requests to MixPanel and that would even help with not exposing users' IP addresses directly to MixPanel if they opt-in to analytics, but this supposed improvement is outside the scope of this issue.
Problem
We found in MixPanel a concerning number of events being published from builds that appear to come from non-production usage. Instead of relying on internal conventions with CCs while they develop/test in their own machines or when using PR builds, it's better to use separate MixPanel projects per environment.
Implementation
In MixPanel there are two projects we care about, production (named
status-im
) and test (namedtest.status-im
).We should inject two vars in the CI,
MIXPANEL_APP_ID
,MIXPANEL_TOKEN
. Only release builds should use the production project, and all the rest should use the test project. The vars values are not secrets https://developer.mixpanel.com/reference/project-token, and actually the MixPanel token can be exploited, as is the case for analytics tools integrated with clients.We could make the Status Proxy handle requests to MixPanel and that would even help with not exposing users' IP addresses directly to MixPanel if they opt-in to analytics, but this supposed improvement is outside the scope of this issue.
Acceptance Criteria
The text was updated successfully, but these errors were encountered: