[jira] [Created] (CAMEL-15563) Sensitive keys are logged in auto-configuration summary

["Aaron Oakley (Jira)" <ji...@apache.org>]

Aaron Oakley created CAMEL-15563:
------------------------------------

             Summary: Sensitive keys are logged in auto-configuration summary
                 Key: CAMEL-15563
                 URL: https://issues.apache.org/jira/browse/CAMEL-15563
             Project: Camel
          Issue Type: Bug
          Components: camel-main
    Affects Versions: 3.5.0, 3.3.0
            Reporter: Aaron Oakley
             Fix For: 3.x
         Attachments: image-2020-09-21-19-16-25-858.png

Hello

Using camel 3.3.0 in a quarkus app, on startup we get a log statement like this:


{code:java}
Sep 22, 2020 12:08:35 AM org.apache.camel.main.BaseMainSupport autoconfigure
INFO: Auto-configuration summary:
Sep 22, 2020 12:08:36 AM org.apache.camel.main.BaseMainSupport lambda$autoconfigure$0
INFO: camel.component.activemq.password=password
Sep 22, 2020 12:08:36 AM org.apache.camel.main.BaseMainSupport lambda$autoconfigure$0
INFO: camel.component.activemq.username=username
{code}
We would expect to see, based on BaseMainSupport.java the following:
{code:java}
INFO: camel.component.activemq.password=xxxxxx
{code}
When I debug this I see the following on BaseMainSupport.autoconfigure(CamelContext camelContext) (line 536):

 


!image-2020-09-21-19-16-25-858.png!

 

We can work around by disabling the auto-configuration summary or disabling the logger for BaseMainSupport.

 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)