Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: azure sas token visible in logs #6323

Merged
merged 1 commit into from
Sep 2, 2024

Conversation

alexwilcoxson-rel
Copy link
Contributor

@alexwilcoxson-rel alexwilcoxson-rel commented Aug 28, 2024

Which issue does this PR close?

Closes #6322

Rationale for this change

SasTokens, while they do expire, are a credential and should not be logged.

What changes are included in this PR?

Sets is_sensitive = true on retryable requests in AzureClient when SasToken credential is used.

Are there any user-facing changes?

No

@github-actions github-actions bot added the object-store Object Store Interface label Aug 28, 2024
@crepererum crepererum merged commit 97ae9d7 into apache:master Sep 2, 2024
15 checks passed
@alexwilcoxson-rel alexwilcoxson-rel deleted the sensitive-azure branch September 3, 2024 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
object-store Object Store Interface
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Azure SAS tokens are visible when retry errors are logged via object_store
3 participants