Mandiax / soi-toolkit

Automatically exported from code.google.com/p/soi-toolkit
0 stars 0 forks source link

Soi-toolkit messageLogging logs visible password for SFTP inbound endpoint when using username/password #382

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. Create a project with SFTP inbound endpoint using username/password as 
authentication method and soi-toolkit messageLogging
2. Enable Mule DEBUG logging for org.mule.transport.sftp
3. Run application

What is the expected output? What do you see instead?
In Mule log password is concealed with *** on SFTP inbound endpoint but in 
soi-toolkit log password is visible.
Soi-toolkit should also conceal password with preferably ***.
Note: This works fine on SFTP outbound endpoint.

///////////////////////////
Mule log
2014-11-27 14:41:31,639 DEBUG 
[[ic_113_MedinetTidomatUnderlag].connector.sftp.mule.default.receiver.01] 
org.mule.transport.sftp.SftpMessageReceiver - Polling. 1 files found at 
sftp://Username:****@sftp.lul.se:22/Tidomat/ToTidomat:[test.fil]

Soi-toolkit log
** logEvent-info.start 
***********************************************************
IntegrationScenarioId=113
ContractId=
LogMessage=101
ServiceImpl=svc_113-inbound-service
Host=localhost (192.168.0.XXX)
ComponentId=ic_113_MedinetTidomatUnderlag
Endpoint=sftp://Username:Password@sftp.lul.se:22/Tidomat/ToTidomat
MessageId=18d38240-763b-11e4-9cc1-b562a5116034
BusinessCorrelationId=18d46ca4-763b-11e4-9cc1-b562a5116034
BusinessContextId=

///////////////////////////////////

What version of the product are you using?
Soi-toolkit 0.6.1
Mule ESB 3.4.0

Original issue reported on code.google.com by kajsa.an...@callistaenterprise.se on 27 Nov 2014 at 2:16