fall back to uuid for empty identifiers with no traits

api/environments/sdk/services.py

@@ -1,4 +1,5 @@
 import hashlib
+import uuid
 from itertools import chain
 from operator import itemgetter
 from typing import TypeAlias
@@ -91,13 +92,15 @@ def get_persisted_identity_and_traits(
 
 
 def get_transient_identifier(sdk_trait_data: list[SDKTraitData]) -> str:
-    return hashlib.sha256(
-        "".join(
-            f'{trait["trait_key"]}{trait["trait_value"]["value"]}'
-            for trait in sorted(sdk_trait_data, key=itemgetter("trait_key"))
-        ).encode(),
-        usedforsecurity=False,
-    ).hexdigest()
+    if sdk_trait_data:
+        return hashlib.sha256(
+            "".join(
+                f'{trait["trait_key"]}{trait["trait_value"]["value"]}'
+                for trait in sorted(sdk_trait_data, key=itemgetter("trait_key"))
+            ).encode(),
+            usedforsecurity=False,
+        ).hexdigest()
+    return uuid.uuid4().hex
 
 
 def _get_transient_identity(

api/tests/integration/environments/identities/test_integration_identities.py

@@ -328,6 +328,29 @@ def test_get_feature_states_for_identity__segment_match_expected(
     assert flag_data["feature_state_value"] == "segment override"
 
 
+def test_get_feature_states_for_identity__empty_traits__random_identifier_expected(
+    sdk_client: APIClient,
+    environment: int,
+) -> None:
+    # Given
+    url = reverse("api-v1:sdk-identities")
+
+    # When
+    response_1 = sdk_client.post(
+        url,
+        data=json.dumps({"traits": []}),
+        content_type="application/json",
+    )
+    response_2 = sdk_client.post(
+        url,
+        data=json.dumps({"traits": []}),
+        content_type="application/json",
+    )
+
+    # Then
+    assert response_1.json()["identifier"] != response_2.json()["identifier"]
+
+
 def test_get_feature_states_for_identity__transient_trait__segment_match_expected(
     sdk_client: APIClient,
     feature: int,