search

apigee / apigee-config-maven-plugin

apigee-config-maven-plugin
Apache License 2.0
55 stars 108 forks source link

Plugin logs developer app credentials in clear text #175

Closed patrick-zinner closed 1 year ago

patrick-zinner commented 1 year ago

If you use the plugin (for Apigee X) and use it to create developer apps, it logs the consumerKeys and consumerSecrets in clear text. There is no way to turn off this behaviour, even if you configure the log level to NONE.

ssvaidyanathan commented 1 year ago

@patrick-zinner - how about we change it to debug? so in case one needs to see that in the logs, they can by just pass the "-X" to the maven call?

patrick-zinner commented 1 year ago

Sounds reasonable!

ssvaidyanathan commented 1 year ago

I've fixed and released a new version v2.4.5 Please test using that and then re-open this issue if the issue still not fixed