lasdf1234 opened a new issue, #14231:
URL: https://github.com/apache/gravitino/issues/14231
### Version
main branch
### Describe what's wrong
`GET .../secrets` / `SupportsSecrets.getSecrets()` returns the internal
entity identifier as if it were a secret:
```
{"code":0,"secrets":{"gravitino.identifier":"gravitino.v1.uid...","jdbc-password":"..."}}
```
`getSecrets` recovers every property declared `hidden`.
`gravitino.identifier` is reserved+hidden for every entity
(`BasePropertiesMetadata`), so every caller receives it. API list/get already
omit reserved+hidden keys via `HiddenPropertyMaskUtils`; `getSecrets` should do
the same.
### Error message and/or stacktrace
N/A — response succeeds but includes an internal system property.
### How to reproduce
Call `getSecrets` on any catalog (or other metadata object) that has stored
properties.
### Additional context
Pass criteria: `getSecrets` never returns `gravitino.identifier` or other
reserved+hidden internal properties. Align recovery with
`HiddenPropertyMaskUtils` (`hidden && !reserved`).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
