Просмотр исходного кода

chore: redact some audit logs from CLI

JianBo He 2 лет назад
Родитель
Сommit
b970a34ee0
1 измененных файлов с 11 добавлено и 1 удалено
  1. 11 1
      apps/emqx_conf/src/emqx_conf_cli.erl

+ 11 - 1
apps/emqx_conf/src/emqx_conf_cli.erl

@@ -108,7 +108,17 @@ admins(_) ->
     emqx_ctl:usage(usage_sync()).
 
 audit(Level, From, Log) ->
-    ?AUDIT(Level, From, Log#{time => logger:timestamp()}).
+    Log1 = redact(Log#{time => logger:timestamp()}),
+    ?AUDIT(Level, From, Log1).
+
+redact(Logs = #{cmd := admins, args := ["add", Username, _Password | Rest]}) ->
+    Logs#{args => ["add", Username, "******" | Rest]};
+redact(Logs = #{cmd := admins, args := ["passwd", Username, _Password]}) ->
+    Logs#{args => ["passwd", Username, "******"]};
+redact(Logs = #{cmd := license, args := ["update", _License]}) ->
+    Logs#{args => ["update", "******"]};
+redact(Logs) ->
+    Logs.
 
 usage_conf() ->
     [