keycloak-config-cli icon indicating copy to clipboard operation
keycloak-config-cli copied to clipboard

added turbo filter to sanitize wire log messages

Open Thendo20 opened this issue 2 months ago • 1 comments

What this PR does / why we need it:

Secrets are leaked when logging level is set to debug, this PR addresses that by implementing a turbo filter. The turbo filter intercepts the wire log messages and detects sensitive data patterns (passwords, tokens, secrets) then suppresses log lines containing the sensitive information.

Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged):

fixes #1302

Special notes for your reviewer:

PR Readiness Checklist:

Complete these before marking the PR as ready to review:

  • [x] the CHANGELOG.md release notes have been updated to reflect any significant (and particularly user-facing) changes introduced by this PR

Thendo20 avatar Nov 10 '25 12:11 Thendo20