[ 
https://issues.apache.org/jira/browse/KNOX-2572?focusedWorklogId=578583&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-578583
 ]

ASF GitHub Bot logged work on KNOX-2572:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 07/Apr/21 19:18
            Start Date: 07/Apr/21 19:18
    Worklog Time Spent: 10m 
      Work Description: pzampino opened a new pull request #432:
URL: https://github.com/apache/knox/pull/432


   ## What changes were proposed in this pull request?
   
   Apparently, there are a number of places where the UUIDs associated with 
Knox JWTs are still being logged in their entirety.
   This change is to mask all of those remaining messages.
   
   ## How was this patch tested?
   
   Added ZookeeperTokenStateServiceTest#testTokenIDDisplayText() to test the 
masking of token ID in aliases. The rest of the changes involving plain tokens 
uses the previously tested Tokens.getTokenIDDisplayText(String id) facility.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Issue Time Tracking
-------------------

            Worklog Id:     (was: 578583)
    Remaining Estimate: 0h
            Time Spent: 10m

> Unique token identifiers still being logged in entirety
> -------------------------------------------------------
>
>                 Key: KNOX-2572
>                 URL: https://issues.apache.org/jira/browse/KNOX-2572
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 1.6.0
>            Reporter: Philip Zampino
>            Assignee: Philip Zampino
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The ZookeeperTokenStateService and AliasBasedTokenStateService 
> implementations are still logging JWT token UUIDs in their entirety, 
> apparently missed by KNOX-2561.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to