You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2020/09/23 03:52:33 UTC
[GitHub] [pulsar] tabalt opened a new issue #8109: Pulsar client output the auth info may reveal sensitive information
tabalt opened a new issue #8109:
URL: https://github.com/apache/pulsar/issues/8109
**Is your enhancement request related to a problem? Please describe.**
Pulsar client output the auth info may reveal sensitive information
**Describe the solution you'd like**
Remove auth information from log
**Additional context**
INFO o.a.p.c.i.ProducerStatsRecorderImpl:102 - Pulsar client config: {
"serviceUrl" : "pulsar://127.0.0.1:6650",
"authPluginClassName" : "org.apache.pulsar.client.impl.auth.AuthenticationToken",
"authParams" : "xxx",
"authParamMap" : null,
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] codelipenghui closed issue #8109: Pulsar client output the auth info may reveal sensitive information
Posted by GitBox <gi...@apache.org>.
codelipenghui closed issue #8109:
URL: https://github.com/apache/pulsar/issues/8109
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] racorn commented on issue #8109: Pulsar client output the auth info may reveal sensitive information
Posted by GitBox <gi...@apache.org>.
racorn commented on issue #8109:
URL: https://github.com/apache/pulsar/issues/8109#issuecomment-724742159
Unfortunately, this breaks configuration of authentication parameters with a property map supported by
`PulsarClient.builder().loadConf(configMap)`
like TLS client certificate authentication (where this is no sensitive information, just filenames).
It breaks because the way `ConfigurationDataUtils.loadData` is implemented, where the configuration data is serialized to a string before it is deserialized back to a desired type (and loose the fields annotated with JsonIgnore).
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org