You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jira@kafka.apache.org by GitBox <gi...@apache.org> on 2021/11/10 23:37:13 UTC

[GitHub] [kafka] kirktrue opened a new pull request #11489: KAFKA-13446: Remove JWT access token from logs

kirktrue opened a new pull request #11489:
URL: https://github.com/apache/kafka/pull/11489


   The OAuth code logs the access token on both the client and the server, potentially exposing service account details. Remove all logging entries to prevent this from leaking.
   
   ### Committer Checklist (excluded from commit message)
   - [ ] Verify design and implementation 
   - [ ] Verify test coverage and CI build status
   - [ ] Verify documentation (including upgrade notes)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [kafka] dajac merged pull request #11489: KAFKA-13446: Remove JWT access token from logs

Posted by GitBox <gi...@apache.org>.
dajac merged pull request #11489:
URL: https://github.com/apache/kafka/pull/11489


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [kafka] dajac commented on pull request #11489: KAFKA-13446: Remove JWT access token from logs

Posted by GitBox <gi...@apache.org>.
dajac commented on pull request #11489:
URL: https://github.com/apache/kafka/pull/11489#issuecomment-968680604


   Merged to trunk and 3.1.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org