Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Basic auth is exposed when Consul fails #464

Open
ilawjr opened this issue Apr 3, 2020 · 0 comments
Open

Basic auth is exposed when Consul fails #464

ilawjr opened this issue Apr 3, 2020 · 0 comments
Labels

Comments

@ilawjr
Copy link

ilawjr commented Apr 3, 2020

Description:
Petasos exposed basic auth to consul in it's logs when the consul server went out of service. (gateway 502 error).

{
authorization: Basic [redacted]
device_id: [redacted]/config
error: Unexpected response code: 502 (

<title>502 Bad Gateway</title>

502 Bad Gateway


nginx/1.10.2 ) level: error msg: accessor failed to return an instance ts: 2020-03-10T18:13:07.133368323Z }

Expected:
Basic auth would be obfuscated.

@ilawjr ilawjr added the bug label Apr 3, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant