Unleash / unleash-client-java

Unleash client SDK for Java
https://docs.getunleash.io
Apache License 2.0
118 stars 69 forks source link

fix: Use sha256 digest instead of exposing api key #207

Closed chriswk closed 1 year ago

chriswk commented 1 year ago

As mentioned in #206 - The way we did the identifier for a client inadvertently also exposes api keys in the logs when logging that you have more than one client using the same configuration. This fix uses the SHA-256 hash of the three elements (apiKey, appName and instanceId) together and then uses the hex representation of that as the client identifier instead.

In addition this updates the log message to tell you that you have n clients for appName:instanceId combination.

sonatype-lift[bot] commented 1 year ago

Sonatype Lift is retiring

Sonatype Lift will be retiring on Sep 12, 2023, with its analysis stopping on Aug 12, 2023. We understand that this news may come as a disappointment, and Sonatype is committed to helping you transition off it seamlessly. If you’d like to retain your data, please export your issues from the web console. We are extremely grateful and thank you for your support over the years.

📖 Read about the impacts and timeline