bonsairobo opened a new issue, #6599:
URL: https://github.com/apache/opendal/issues/6599

   ### Describe the bug
   
   I recently got a 404 error while using opendal's Azblob service, and I 
logged this error:
   
   ```
   NotFound (permanent) at read, context: {
       uri: 
https://foo.blob.core.windows.net/bar?skoid=REDACTED&skt=REDACTED&ske=REDACTED&sks=b&skv=2022-11-02&sv=2022-11-02&sp=rl&sr=c&se=2025-09-27T20%3A17%3A54Z&sig=REDACTED,
       response: Parts {
           status: 404, 
           version: HTTP/1.1,
           headers: {"content-length": "215", "content-type": 
"application/xml", "server": "Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0", 
"x-ms-request-id": "REDACTED", "x-ms-version": "2022-11-02", "x-ms-error-code": 
"BlobNotFound", "date": "Sat, 27 Sep 2025 19:17:57 GMT"} },
           service: azblob,
           path: bar,
           range: 0-
   } => AzblobError { code: "BlobNotFound", message: "The specified blob does 
not exist. RequestId:REDACTED Time:2025-09-27T19:17:57.6169516Z" }
   ```
   
   I replaced the sensitive content with REDACTED. As you can see, the `uri` 
contains the SAS token parameters, which are sensitive info.
   
   ### Steps to Reproduce
   
   Make a failing request (e.g. for a non-existent object) using the Azblob 
backend with a SAS token.
   
   I suspect the same issue would occur with any other type of HTTP request 
that has sensitive info in the URI.
   
   ### Expected Behavior
   
   Hide sensitive uri information from the error's display/debug impls.
   
   ### Additional Context
   
   _No response_
   
   ### Are you willing to submit a PR to fix this bug?
   
   - [x] Yes, I would like to submit a PR.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@opendal.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to