lasdf1234 opened a new issue, #13124:
URL: https://github.com/apache/gravitino/issues/13124

   ### Version
   
   main branch
   
   ### Describe what's wrong
   
   After [#12750](https://github.com/apache/gravitino/issues/12750) / 
[#12751](https://github.com/apache/gravitino/pull/12751), JDBC catalogs return 
`jdbc-user` in plaintext because it identifies the account rather than a 
secret. Iceberg and Paimon JDBC backends still mark `jdbc-user` as `hidden`, so 
`GET .../catalogs/{catalog}` returns `******` for Iceberg/Paimon while JDBC 
returns the real username. Docs already state that `jdbc-user` is returned in 
plaintext.
   
   ### Error message and/or stacktrace
   
   Iceberg/Paimon catalog properties response shows:
   ```json
   "jdbc-user": "******"
   ```
   while a JDBC catalog with the same username shows:
   ```json
   "jdbc-user": "demo"
   ```
   
   ### How to reproduce
   
   1. Create a JDBC catalog with `jdbc-user` / `jdbc-password`.
   2. Create a `lakehouse-iceberg` catalog with `catalog-backend=jdbc` and the 
same `jdbc-user` / `jdbc-password`.
   3. Load both catalogs via the REST API.
   4. Observe that JDBC returns plaintext `jdbc-user`, while Iceberg returns 
`******`.
   
   ### Additional context
   
   Align Iceberg and Paimon with the JDBC behavior from #12750. Keep 
`jdbc-password` and cloud credential secrets hidden/masked.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to