getAlby / getAlby/oauth2server
hide refresh and access tokens from being logged in datadog
- Dominant language
- Go
- Stars
- 5
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
## Description
Currently all the DB commands are being logged in datadog which include access tokens and refresh tokens. If Datadog is compromised then that would put these at risk as well.
## Proposed Solution
Maybe hash/hide the tokens from the logs?
## Further Info
Logs: https://app.datadoghq.eu/logs?query=service%3Aoauth2server%20refresh%20&agg_q=host&analyticsOptions=%5B%22bars%22%2C%22dog_classic%22%2Cnull%2Cnull%5D&cols=host%2Cservice&index=%2A&messageDisplay=inline&refresh_mode=sliding&sort_m=&sort_t=&stream_sort=desc&top_n=10&top_o=top&view=spans&viz=stream&x_missing=true&from_ts=1697608587172&to_ts=1700200587172&live=true
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.