openstack/murano-dashboard
Code Issues Proposed changes

Hide token id in logs

Browse Source 
Until this time it was possible to steal token from the logs. Token
was logged during muranoclient creation.

SecurityImpact
Closes-Bug: #1503059
Change-Id: Ia2c7e19872a4d5b5093acd2e43b76273f02996e9
This commit is contained in:
Nikolay Starodubtsev
2015-10-06 14:50:14 +03:00
parent 182ab507ae
commit 426742aa41
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
muranodashboard/api/__init__.py
View File

@@ -131,8 +131,7 @@ def muranoclient(request):
artifacts = None artifacts = None
token_id = request.user.token.id token_id = request.user.token.id
LOG.debug('Murano::Client <Url: {0}, ' LOG.debug('Murano::Client <Url: {0}>'.format(endpoint))
'TokenId: {1}>'.format(endpoint, token_id))
return client.Client(1, endpoint=endpoint, token=token_id, return client.Client(1, endpoint=endpoint, token=token_id,
insecure=insecure, artifacts_client=artifacts, insecure=insecure, artifacts_client=artifacts,