mirror of
https://github.com/oauth2-proxy/oauth2-proxy.git
synced 2026-09-29 19:21:13 +02:00
dawgandJan Larwig
b4eb611c07
* partly address #2120 and more aggressively truncate access_token - leaking half of the access token to the logs seems problematic from a security point of view - also noisier than necessary logging - fixed by truncating to at most first 5 chars (e.g. `ya29.`) Signed-off-by: Martin Nowak <code@dawg.eu> * feat: more aggressively truncate logged access_token; add unit test and changelog Signed-off-by: Jan Larwig <jan@larwig.com> --------- Signed-off-by: Martin Nowak <code@dawg.eu> Signed-off-by: Jan Larwig <jan@larwig.com> Co-authored-by: Jan Larwig <jan@larwig.com>