scalecube-config icon indicating copy to clipboard operation
scalecube-config copied to clipboard

Secured properties must not be exposed

Open artem-v opened this issue 7 years ago • 0 comments

With addition of config-vault module we started to support secured properties. There are places in the library where name and value of config property are exposed: config_listener, jmx exposer, http_server and plain log occurences. It's bad idea to show plain decrypted prop value in the log while keep it encrypted in Vault.

In this ticket. Get rid of places where pconfig property values are exposed. This includes: audit log entires. plain library debug log entries, http server must not expose prop values, jmx shoulnd't expose prop values.

artem-v avatar Jun 07 '18 11:06 artem-v