aries-cloudagent-python icon indicating copy to clipboard operation
aries-cloudagent-python copied to clipboard

🔇 ACA-Py should not log credential attributes

Open ff137 opened this issue 8 months ago • 0 comments

Credential attributes can contain private information, and it should be obfuscated in logs. Examples of where it is currently logged:

acapy_agent.messaging.base_handler INFO Received v2.0 credential offer message: {...}

The above log prints raw values for credential attributes, as well as a base64 encoding that contains it as well. Both should be obfuscated.

ff137 avatar Apr 03 '25 14:04 ff137