Ma77Ball opened a new issue, #5335:
URL: https://github.com/apache/texera/issues/5335

   Part of #4070.
   
   ### Goal
   Stop the access-control service from leaking credentials into the log 
pipeline.
   
   ### Problem
   `AccessControlResource` logged the raw bearer token, the full request header 
map (which contains `Authorization: Bearer ...`), and the entire POST body 
(which can carry a token) at INFO.
   
   ### Scope
   - token -> presence + length only; headers -> names only; body -> length 
only.
   - Stop interpolating the raw parse exception (jose4j errors can echo the 
token).
   
   Branch: `fix/redact-secrets-in-access-control-logs`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to