Project

General

Profile

Actions
Copy link

Bug #57006

closed

mgr/dashboard: remove debug log line printing the JWT

Added by Ernesto Puerta almost 2 years ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Urgent
Assignee:
Pere Díaz Bou
Category:
Security & Auth
Target version:
-
% Done:

100%

Source:
Tags:
Backport:
quincy,pacific
Regression:
No
Severity:
2 - major
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
47418
Crash signature (v1):
Crash signature (v2):

Description

Description of problem

On debug level, the mgr.log shows the JWT of each user for each HTTP request:

[dashboard DEBUG auth] token: eyJ0...

That line should be removed.

Related issues 2 (0 open — 2 closed)

Copied to Dashboard - Backport #57009: quincy: mgr/dashboard: remove debug log line printing the JWTResolvedPere Díaz BouActions
Copied to Dashboard - Backport #57010: pacific: mgr/dashboard: remove debug log line printing the JWTRejectedPere Díaz BouActions
Actions
Copy link

Also available in: Atom PDF