search

CuriousJames / DIYAC

Raspberry Pi Python code & PCB design project to control door access (access control) via a wiegand card and/or keypad reader, handles a doorbell too
6 stars 2 forks source link

Don't log token values #22

Closed CuriousJames closed 4 years ago

CuriousJames commented 4 years ago

It could be a security risk to log token values to the log file, or even to the console output.

Definitely remove token values from log file output, consider removing them from console output, potentially with a special flag, consider masking user's names too.

CuriousJames commented 4 years ago

This is now possible as part of the 'redacting' implementation, but needs to have 'token' set in redacting in settings