Remove sensitive information from logs

stockpile-co / api

The API for Stockpile, an app that manages stuff for organizations.

0 stars 1 forks source link

Closed AdamVig closed 7 years ago

AdamVig commented 7 years ago

As a Stockpile developer, I should not be able to see passwords from logins and registrations because that means hackers could access them as well.

[x] Change the log level from DEBUG to INFO
[x] Redact passwords from the DEBUG log level (when request bodies are logged)
[x] Change npm run dev to use DEBUG level