[AIRFLOW-6773] Creating users with Airflow CLI leaves the password in clear text in the logs

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.10.9
• Component/s: cli, webserver
• Assignee: Unassigned
• Reporter: Noël BARDELOT
• Created: 11/Feb/20 13:45
• Updated: 11/Feb/20 13:54

Description

Leaving password in clear text in logs should be considered a security issue.

Note: the command 'create_user' is sensitive and should probably not be logged at all in my opinion if there is no simple way of obfuscating the password.

Steps to reproduce:

1. create a user using `airflow create_user` and providing the password using `--password`
2. go to the Browse / Logs view of the UI
3. find the creation log containing the password in clear text

The log entry looks like this:

{{

{"host_name": "airflow-web-774c65857f-drgsm", "full_command": "['/usr/local/bin/airflow', 'create_user', '--role', 'Viewer', '--username', 'viewer', '--email', '[e-mail]', '--firstname', 'viewer', '--lastname', 'airflow', '--password', 'secret']"}

}}