SECURITY : app log messages reveal unobfuscated (clear-text) credentials

[didierm]

When watching the NextCloud logs (NC v21), it is observed that the SharePoint Backend app (v1.9.1) logs the Sharepoint credentials (as entered in the External storages configuration) in cleartext.

Only part of the arguments have their parameter(s) replaced by the string *** sensitive parameters replaced ***.

For an example, please refer to the log extract in #141 (comment) .
In that example, username, password, email and tenant (of which username and password are critically important) were manually replaced by

***username_manually_obfuscated***
***password_manually_obfuscated***
***email_manually_obfuscated***
***tenant_manually_obfuscated***

[blizzz]

fixed in #143 for upcoming 25

and in nextcloud/server#33689 for 24. Backports down to 22 follow.

[blizzz]

fixed in #143 for upcoming 25

and in nextcloud/server#33689 for 24. Backports down to 22 follow.