[
https://issues.apache.org/jira/browse/CAMEL-26917?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on CAMEL-26917 started by Claus Ibsen.
-------------------------------------------
> camel-clickup - the webhook signature check does not log the signatures
> -----------------------------------------------------------------------
>
> Key: CAMEL-26917
> URL: https://issues.apache.org/jira/browse/CAMEL-26917
> Project: Camel
> Issue Type: Improvement
> Components: camel-clickup
> Reporter: Claus Ibsen
> Assignee: Claus Ibsen
> Priority: Minor
> Fix For: 4.24.0
>
>
> The webhook consumer of camel-clickup logs, at DEBUG, the signature from the
> X-Signature header and the signature it calculates for the body, and the
> InvalidMessageSignatureException of a failed check carries the calculated
> signature.
> The signature authenticates a webhook event, so it should stay out of the log
> and out of the exception: log the body that is validated and whether the
> check passed, but no signature. Deprecate
> InvalidMessageSignatureException.getCalculatedSignature() and the constructor
> that takes it.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
