Просмотр исходного кода

Merge pull request #11676 from keynslug/fix/EMQX-11026/secret-access-key-sensitive

fix(ftconf): also mark `secret_access_key` key as sensitive
Andrew Mayorov 2 лет назад
Родитель
Сommit
349a6d906b
2 измененных файлов с 5 добавлено и 0 удалено
  1. 4 0
      apps/emqx_utils/src/emqx_utils.erl
  2. 1 0
      changes/ce/fix-11676.en.md

+ 4 - 0
apps/emqx_utils/src/emqx_utils.erl

@@ -632,6 +632,9 @@ is_sensitive_key(<<"proxy-authorization">>) -> true;
 is_sensitive_key(secret) -> true;
 is_sensitive_key("secret") -> true;
 is_sensitive_key(<<"secret">>) -> true;
+is_sensitive_key(secret_access_key) -> true;
+is_sensitive_key("secret_access_key") -> true;
+is_sensitive_key(<<"secret_access_key">>) -> true;
 is_sensitive_key(secret_key) -> true;
 is_sensitive_key("secret_key") -> true;
 is_sensitive_key(<<"secret_key">>) -> true;
@@ -779,6 +782,7 @@ redact_test_() ->
         'proxy-authorization',
         secret,
         secret_key,
+        secret_access_key,
         security_token,
         token,
         bind_password

+ 1 - 0
changes/ce/fix-11676.en.md

@@ -0,0 +1 @@
+Hide few pieces of sensitive information from debug-level logs.