Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Debug mode dumps secret Auth headers #180

Closed
CallMeFoxie opened this issue Aug 28, 2018 · 2 comments · Fixed by #186
Closed

Debug mode dumps secret Auth headers #180

CallMeFoxie opened this issue Aug 28, 2018 · 2 comments · Fixed by #186

Comments

@CallMeFoxie
Copy link

Hi
it seems that enabling a debug mode dumps password right into the console making it hard to share the log with developers etc. IMHO there should be some filter to filter at least the basic auth/bearer tokens/... out.

---------------------- REQUEST LOG -----------------------
GET  /v1/services  HTTP/1.1
HOST   : 172.16.16.4:443
HEADERS:
                   Accept: application/json
            Authorization: Basic ZGV2OmRldg== <-- HIDE THIS
             Content-Type: application/json
               User-Agent: go-resty v1.7 - https://github.com/go-resty/resty
BODY   :
***** NO CONTENT *****
----------------------------------------------------------

Any opinions? :)
Thanks
Ashley

@jeevatkm
Copy link
Member

@CallMeFoxie I agree, let's create an option in resty.

@jeevatkm
Copy link
Member

jeevatkm commented Sep 19, 2018

@CallMeFoxie I have added the implementation on branch debug-log-enhancement fdc2f93, give it try and please let me know. I will merge it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

Successfully merging a pull request may close this issue.

2 participants