[HDDS-7752] GetS3SecretRequest API should not return secret if secret of user already exists

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 1.4.0
• Component/s: Security
• Labels: pull-request-available
• Target Version/s: 1.4.0
• Assignee: Tejaskriya Madhan
• Reporter: Sammi Chen
• Created: 09/Jan/23 07:24
• Updated: 25/Sep/23 16:01
• Resolved: 14/Sep/23 04:30

Description

It's not a good security practice to get/query plain password of an existing user.

Issue Links

• relates to: HDDS-9349 Intermittent failure in TestSecureOzoneCluster#testGetSetRevokeS3Secret due to S3_SECRET_ALREADY_EXISTS
• links to: GitHub Pull Request #4538