venkateshwaracholan opened a new issue, #4771: URL: https://github.com/apache/polaris/issues/4771
### Describe the bug The Python CLI debug logging implementation logs HTTP request and response headers and payloads directly to stderr. Authentication-related data such as Authorization headers, client_secret, OAuth access tokens, refresh tokens, and realm-related authentication headers may be included in debug output. This can result in sensitive information being written to terminal history, CI/CD logs, or shared debugging environments. Expected behavior: - Sensitive authentication values should be redacted before logging. - OAuth token request/response payloads should not expose credentials. - Non-sensitive debugging information should remain visible. Affected component: client/python/apache_polaris/cli/polaris_cli.py Risk: Credential exposure through debug logging. ### To Reproduce _No response_ ### Actual Behavior _No response_ ### Expected Behavior _No response_ ### Additional context _No response_ ### System information _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
