[jira] [Assigned] (KARAF-7537) Password displayed in console using repo-list

["Jean-Baptiste Onofré (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KARAF-7537?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jean-Baptiste Onofré reassigned KARAF-7537:
-------------------------------------------

    Assignee: Jean-Baptiste Onofré

> Password displayed in console using repo-list
> ---------------------------------------------
>
>                 Key: KARAF-7537
>                 URL: https://issues.apache.org/jira/browse/KARAF-7537
>             Project: Karaf
>          Issue Type: Wish
>    Affects Versions: 4.3.7
>            Reporter: Colm O hEigeartaigh
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>
> If you add a feature repository with a user credential, e.g.:
> {code:java}
> repo-add mvn:https://user:password@repo1.maven.org/maven2!org.apache.cxf.karaf/apache-cxf/3.5.3/xml/features {code}
> Then Karaf displays the password in full in the console with:
> {code:java}
>  repo-list | grep password
> cxf-3.5.3                         │ mvn:https://user:password@repo1.maven.org/maven2!org.apache.cxf.karaf/apache-cxf/3.5.3/xml/features {code}
> For repos that contain a password, it would be more secure if the password was redacted for logging/display purposes.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)