HyukjinKwon opened a new pull request, #58594:
URL: https://github.com/apache/spark/pull/58594

   ### What changes were proposed in this pull request?
   
   `KafkaRedactionUtil.redactJaasParam` only redacted double-quoted 
`password="..."` entries when
   logging Kafka JAAS configuration. This broadens it to redact the credential 
value regardless of
   quoting style (`password="..."`, `password='...'`, `password=value`) and to 
also cover
   `clientSecret=...` used by the OAUTHBEARER login module.
   
   ### Why are the changes needed?
   
   Single-quoted, unquoted, and `clientSecret` credential fields were 
previously printed verbatim in
   debug logs. Redaction should cover all the credential forms the JAAS config 
can contain.
   
   ### Does this PR introduce _any_ user-facing change?
   
   No behavior change other than that more JAAS credential fields are masked in 
logs.
   
   ### How was this patch tested?
   
   Added cases to `KafkaRedactionUtilSuite` covering double-quoted, 
single-quoted, and unquoted
   `password`, and `clientSecret`.
   
   ### Was this patch authored or co-authored using generative AI tooling?
   
   Generated-by: Isaac
   
   This pull request and its description were written by Isaac.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to