diff --git a/releasenotes/notes/fix-credential-logging-98089c897d801355.yaml b/releasenotes/notes/fix-credential-logging-98089c897d801355.yaml index e06e2e2774..9534a72436 100644 --- a/releasenotes/notes/fix-credential-logging-98089c897d801355.yaml +++ b/releasenotes/notes/fix-credential-logging-98089c897d801355.yaml @@ -1,6 +1,9 @@ --- -security: +features: - | - Recently we moved the logging of API request in rest_client's - raw_request which end up logging the credentials also from - Token client request. This issue has been fixed now. + A new kwarg, ``log_req_body``, was added to the + ``tempest.lib.common.rest_client.RestClient`` method ``raw_request()``. + This kwarg takes in a string which will be used in place of the request + body, which is logged by default. The intent of this option is to be used + for security reasons to avoid logging sensitive information that are part + of request bodies.