[I] Python CLI debug logging may expose sensitive authentication data [polaris]

["venkateshwaracholan (via GitHub)" <gi...@apache.org>]

venkateshwaracholan opened a new issue, #4771:
URL: https://github.com/apache/polaris/issues/4771

   ### Describe the bug
   
   The Python CLI debug logging implementation logs HTTP request and response
   headers and payloads directly to stderr.
   
   Authentication-related data such as Authorization headers, client_secret,
   OAuth access tokens, refresh tokens, and realm-related authentication headers
   may be included in debug output.
   
   This can result in sensitive information being written to terminal history,
   CI/CD logs, or shared debugging environments.
   
   Expected behavior:
   - Sensitive authentication values should be redacted before logging.
   - OAuth token request/response payloads should not expose credentials.
   - Non-sensitive debugging information should remain visible.
   
   Affected component:
   client/python/apache_polaris/cli/polaris_cli.py
   
   Risk:
   Credential exposure through debug logging.
   
   ### To Reproduce
   
   _No response_
   
   ### Actual Behavior
   
   _No response_
   
   ### Expected Behavior
   
   _No response_
   
   ### Additional context
   
   _No response_
   
   ### System information
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Python CLI debug logging may expose sensitive authentication data [polaris]

["MonkeyCanCode (via GitHub)" <gi...@apache.org>]

MonkeyCanCode closed issue #4771: Python CLI debug logging may expose sensitive authentication data
URL: https://github.com/apache/polaris/issues/4771


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org