OAuth 2.0 server and client; OpenID Connect Provider (OP) & UMA Authorization Server (AS)
421
stars
150
forks
source link
fix(oxauth): Plaintext passwords logged from TokenRestWebServiceImpl with DEBUG log level #1910
Closed
mmrraju closed 1 week ago
Describe the issue
Ticket-11878
User password prints on log. when
grant_type
ispassowd
.https://github.com/GluuFederation/oxAuth/blob/a40a882660e2468f640c85d0a814dd00f8c63dbd/Server/src/main/java/org/gluu/oxauth/token/ws/rs/TokenRestWebServiceImpl.java#L127.
The "ExtraParams" will print out passwords for password_grant.
Screenshots
Desktop (please complete the following information):