ahgittin opened a new pull request, #1346:
URL: https://github.com/apache/brooklyn-server/pull/1346

   …solve things
   
   esp for config keys; so if a non-sensitive config key is a complex object or 
map with a `password` field, that password field will be suppressed as part of 
the JSON serialization
   
   two other minor subtle tweaks:
   * previously when we suppressed complex objects we showed the hash code for 
the toString; now we show the hash code for the json (with minimal whitespace)
   * if an API caller requests PLAIN_TEXT we run toString on the internal java 
objects; now if secret suppression is desired, we check that toString (which is 
often a value), and if it has any sensitive token indicators, it is suppressed; 
this could hide a value we want to see, but realy PLAIN_TEXT is rarely used 
AFAIK esp with compex objects, the meaning of plaintext here is not formally 
specified, and if secrets need to be suppressed this seems the right balance.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@brooklyn.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to