getAlby / getAlby/oauth2server

hide refresh and access tokens from being logged in datadog

Open
#113 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
5
Forks
1
PR merge metrics
No merged PRs in 30d

Description

## Description
Currently all the DB commands are being logged in datadog which include access tokens and refresh tokens. If Datadog is compromised then that would put these at risk as well.

## Proposed Solution
Maybe hash/hide the tokens from the logs?

## Further Info
Logs: https://app.datadoghq.eu/logs?query=service%3Aoauth2server%20refresh%20&agg_q=host&analyticsOptions=%5B%22bars%22%2C%22dog_classic%22%2Cnull%2Cnull%5D&cols=host%2Cservice&index=%2A&messageDisplay=inline&refresh_mode=sliding&sort_m=&sort_t=&stream_sort=desc&top_n=10&top_o=top&view=spans&viz=stream&x_missing=true&from_ts=1697608587172&to_ts=1700200587172&live=true

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.