eduohe commented on PR #11047:
URL: https://github.com/apache/gravitino/pull/11047#issuecomment-4445478620

   @yuqi1129 thanks for the feedback. This updated PR addresses this by adding 
a dedicated GET .../catalogs/{catalog}/credentials endpoint that returns the 
hidden properties. The Trino and Spark connectors were also updated to fetch 
credentials from that endpoint and merge them before building the engine 
connector config, so connector functionality is fully preserved. jdbc-password 
is now hidden from the public catalog response without breaking anything 
downstream.
   
   I also checked it the gravitino playground to confirm that the response 
doesn't contain sensitive infos.
   <img width="1491" height="623" alt="gravitino_playground_api_response" 
src="https://github.com/user-attachments/assets/2190efaa-c853-4afb-90fe-e7231554aaa5";
 />


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to