You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@fluss.apache.org by "polyzos (via GitHub)" <gi...@apache.org> on 2025/11/17 10:18:59 UTC
[I] [FileSystem] Mask user credentials [fluss]
polyzos opened a new issue, #1989:
URL: https://github.com/apache/fluss/issues/1989
### Search before asking
- [x] I searched in the [issues](https://github.com/apache/fluss/issues) and found nothing similar.
### Description
Currently, when connecting to filesystems like S3, users add their secrets. However, currently these secrets are exposed in the logs, which might be undesirable for security reasons.
<img width="2471" height="597" alt="Image" src="https://github.com/user-attachments/assets/87edd297-9e02-4514-818f-ea3ca24c246e" />
We could implement a simple masking mechanism, i.e if my access key is AS7124FSDFER, only expose some initial letters and mask the others, i.e, AS7*******.
This way, users can both verify the right access key is used, but it's also not exposed as a whole.
### Willingness to contribute
- [ ] I'm willing to submit a PR!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [FileSystem] Mask user secret in the S3DelegationTokenProvider/S3DelegationTokenReceiver [fluss]
Posted by "QuakeWang (via GitHub)" <gi...@apache.org>.
QuakeWang commented on issue #1989:
URL: https://github.com/apache/fluss/issues/1989#issuecomment-4585390594
Hi @Pikady, are you still working on this issue? If not, I’d like to take it over and submit a PR.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [FileSystem] Mask user secret in the S3DelegationTokenProvider/S3DelegationTokenReceiver [fluss]
Posted by "polyzos (via GitHub)" <gi...@apache.org>.
polyzos commented on issue #1989:
URL: https://github.com/apache/fluss/issues/1989#issuecomment-3541747102
@Pikady thank you for your interest 🥇 Assigned to you!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [FileSystem] Mask user secret in the S3DelegationTokenProvider/S3DelegationTokenReceiver [fluss]
Posted by "Pikady (via GitHub)" <gi...@apache.org>.
Pikady commented on issue #1989:
URL: https://github.com/apache/fluss/issues/1989#issuecomment-3541741358
Hi, @polyzos . I'd like to propose and implement a solution. My plan is:
- Create a MaskedValue wrapper class in fluss-common. Any sensitive string wrapped with MaskedValue.of(secret) will be automatically masked when logged, making the developer's job easy and the code clean.
- Update the S3 code to use this new wrapper for the accessKey.
If this plan is ok, please assign this issue to me. I'm willing to submit a PR!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [FileSystem] Mask user secret in the S3DelegationTokenProvider/S3DelegationTokenReceiver [fluss]
Posted by "luoyuxia (via GitHub)" <gi...@apache.org>.
luoyuxia closed issue #1989: [FileSystem] Mask user secret in the S3DelegationTokenProvider/S3DelegationTokenReceiver
URL: https://github.com/apache/fluss/issues/1989
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@fluss.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org