Unleash / unleash-client-java

Unleash client SDK for Java
https://docs.getunleash.io
Apache License 2.0
119 stars 70 forks source link

SDK exposes Api key in logs #206

Closed chriswk closed 1 year ago

chriswk commented 1 year ago

Describe the bug

When instantiating more than one client in the same process, Unleash warns you that this is not a recommended way to do so. When it warns you the ERROR log message contains the API key it has seen more than one client instance for.

Steps to reproduce the bug

Instantiate two UnleashClients in the same process from the same Unleash Config. Once the second client is instantiated, observe that the error message contains the api key

Expected behavior

I'd still like to see the ERROR message, but with a redacted API key.

Logs, error output, etc.

No response

Screenshots

No response

Additional context

No response

Unleash version

No response

Subscription type

None

Hosting type

None

SDK information (language and version)

unleash-client-java:8.2.0