[FEATURE REQUEST] Don't redact auth type HTTP request logging

[JuancaG05]

Related Issues

App: https://github.com/owncloud/android/issues/4249

• [x] Added changelog files for the fixed issues in folder changelog/unreleased. More info here

  ---

QA

[JuancaG05]

When using the MDM parameter, if logs are already enabled, we need to disable and re-enable them again for this option to work properly. This is because we cannot perform an active listening to changes in MDM parameters, we just read them when necessary, and in this case, we decide if we show sensitive information or not (by reading the MDM parameter) every time we enable logs.

[michaelstingl]

This is because we cannot perform an active listening to changes in MDM parameters, we just read them when necessary, and in this case, we decide if we show sensitive information or not (by reading the MDM parameter) every time we enable logs.

Okay for me, that MDM config changes require a restart of the app. iOS app for example triggers a notification to tell the user to close and re-open the app.

[jesmrec]

QA checks

• [X] Check that authentication method is separated from [redacted] in Authorization header
• [X] Check redact_auth_header_logs = true does not reveal secrets in logs
• [X] Check redact_auth_header_logs = false reveals secrets in logs
• [X] Check both values using MDM build (need disable and enable feature)

OK from my side