potiuk opened a new pull request, #71043: URL: https://github.com/apache/airflow/pull/71043
Backport of #70890 to `v3-3-test`. The audit-log maskers for Variables and Connections dispatch on top-level key names. A bulk request body has exactly one top-level key, `actions`, and the entities sit two levels down in `actions[].entities[]` — so neither `val`/`value` nor `extra` was ever seen, and the payload was recorded as supplied. The masker also runs on the raw request body before validation, so `extra` can arrive as any JSON type; `json.loads` raises `TypeError` rather than `JSONDecodeError` for a non-string, which escaped the audit-log path entirely. **Backport note:** the original commit's context included `TestActionLoggingUserFields`, which belongs to #70583 (`get_display_name` on `BaseUser`) and is not in `v3-3-test`. That class and its imports are dropped here; the rest is identical to the original commit. --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Opus 5) Generated-by: Claude Code (Opus 5) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
