The agent added debug logging and wrote the Authorization header to plaintext logs
DEV Community
The agent added debug logging and wrote the Authorization header to plaintext logs
An agent adds debug logging of the full request and commits the Authorization header and body secrets to plaintext logs. Covers why local green tests miss it, how to allowlist safe headers, redact bearer values and body secrets, and what to do when a token already reached retained logs.
0 comments
No comments yet.