danschultzer / phoenix_oauth2_provider

Get an OAuth 2 provider running in your phoenix with controllers, views and models in just two minutes
MIT License
84 stars 41 forks source link

Filter sensitive information in logs #29

Open danschultzer opened 4 years ago

danschultzer commented 4 years ago

@LostKobrakai commented on slack that some sensitive information is currently logged in requests in Phoenix, like client_secret or request_path and should be filtered.

I agree, and it may also be a good idea to hash client_secret by default in the DB.