[
https://issues.apache.org/jira/browse/CAMEL-26917?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Claus Ibsen updated CAMEL-26917:
--------------------------------
Fix Version/s: 4.22.3
4.18.6
> camel-clickup - the webhook signature check does not log the signatures
> -----------------------------------------------------------------------
>
> Key: CAMEL-26917
> URL: https://issues.apache.org/jira/browse/CAMEL-26917
> Project: Camel
> Issue Type: Improvement
> Components: camel-clickup
> Reporter: Claus Ibsen
> Assignee: Claus Ibsen
> Priority: Minor
> Fix For: 4.18.6, 4.22.3, 4.24.0
>
>
> The webhook consumer of camel-clickup logs, at DEBUG, the signature from the
> X-Signature header and the signature it calculates for the body, and the
> InvalidMessageSignatureException of a failed check carries the calculated
> signature.
> The signature authenticates a webhook event, so it should stay out of the log
> and out of the exception: log the body that is validated and whether the
> check passed, but no signature. Deprecate
> InvalidMessageSignatureException.getCalculatedSignature() and the constructor
> that takes it.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
