A series of characters in the access token returned from the API server are replaced with ***** when saved to current variable.

[vikigai]

trafficstars

Is there an existing issue for this?

• [x] I have searched the tracker for existing similar issues and I know that duplicates will be closed

Describe the Issue

When my API server returns the bearer token, the same eight characters (aGF0dHVj) within the token string are replaced with 5 asterisks and saved to the accessToken current variable (Pre-request..."pm.environment.set('accessToken', newAccessToken);), causing subsequent authentication failures. The api server is returning a valid token (w/o the *****), but the Pre-request script seems to be adding the ***** when setting the accessToken current variable. It's always the same 8 characters that are replaced with the *****. I can consistently reproduce this by adding a console.log("aGF0dHVj") - the log output is always *****.

Steps To Reproduce

1.) Create a simple GET request to google.com 2.) Open the Scripts-->Pre-requests tab 3.) Add console.log("aGF0dHVj"); 4.) Run the request 5.) Open the Console (bottom of Postman app) 6.) You should see "*****" before the GET request

Screenshots or Videos

No response

Operating System

Windows

Postman Version

7.39.0

Postman Platform

Postman App

User Account Type

Signed In User

Additional Context?

No response

[vikigai]

#12846 similar or same issue

[tenekboehm]

I am having the same issue on Ubuntu 22.04.4. Is there any solution or workaround for this?

[Xen0phobe]

I'm encountering this issue on Postman Mac Silicon v11.30.1.

The strings "MDUzMzk4" and "dHJhdGVnaWNpbnQt" are consistently being replaced by asterisks in the "authorization" request header and "client_assertion" request body (when used).

I have not found a workaround.