Skip to content

fix(security): remove OAuth token values from debug log statements#2440

Merged
dpgaspar merged 1 commit intomasterfrom
danielgaspar/sc-100058/security-fab-oauth-token-lo
Mar 13, 2026
Merged

fix(security): remove OAuth token values from debug log statements#2440
dpgaspar merged 1 commit intomasterfrom
danielgaspar/sc-100058/security-fab-oauth-token-lo

Conversation

@dpgaspar
Copy link
Copy Markdown
Owner

Summary

  • Removed OAuth token value from debug log in _oauth_tokengetter() (manager.py)
  • Removed full OAuth response (containing access token) from debug log in oauth_authorized() (views.py)
  • Addresses CWE-532: Insertion of Sensitive Information into Log File

Test plan

  • Verify OAuth login flow still works correctly
  • Verify debug logs no longer contain token values
  • Verify debug logs still provide useful diagnostic messages

[sc-100058]

🤖 Generated with Claude Code

OAuth tokens and full OAuth responses were being logged at debug level,
which could expose bearer credentials in log files (CWE-532).

[sc-100058]

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@dpgaspar dpgaspar merged commit 49de9e2 into master Mar 13, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant