Skip to content

Commit

Permalink
Mask value if the key is token (apache#16474)
Browse files Browse the repository at this point in the history
Some connections (including the databricks connection) use the key 'token' in the 'extra' field (this has always been the case). Including it here so that these sensitive tokens are also masked by default.

The prior implementation just masked all of the 'extra' json: "XXXXXXXX" if conn.extra_dejson else None https://github.com/apache/airflow/blob/88199eefccb4c805f8d6527bab5bf600b397c35e/airflow/hooks/base.py#L78

(cherry picked from commit d1d04fe)
  • Loading branch information
robertsaxby authored and jhtimmins committed Jul 9, 2021
1 parent 79399c0 commit 0a52997
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions airflow/utils/log/secrets_masker.py
Expand Up @@ -55,6 +55,7 @@
'password',
'private_key',
'secret',
'token',
}
)
"""Names of fields (Connection extra, Variable key name etc.) that are deemed sensitive"""
Expand Down

0 comments on commit 0a52997

Please sign in to comment.