Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trace database requests include authorization token #881

Closed
wilbaker opened this issue Mar 27, 2024 · 0 comments · Fixed by #912
Closed

Trace database requests include authorization token #881

wilbaker opened this issue Mar 27, 2024 · 0 comments · Fixed by #912

Comments

@wilbaker
Copy link
Member

Description

When the trace database is enabled, authorization tokens included in requests are being logged in plain text. They should be replaced with _OMITTED_AUTH_TOKEN_ (like the network logs).

Steps to reproduce

  1. Set use_trace_database to true in engine settings
  2. Specify an authentication token module in settings
  3. Run RESTler against service

Expected results

Tokens values are replaced with _OMITTED_AUTH_TOKEN_

Actual results

Token values are logged in plain text.

Environment details

RESTler version 9.2.4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant