[KAFKA-13446] Remove JWT access token from logs

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.0
• Fix Version/s: 3.1.0
• Component/s: logging, security
• Labels: OAuth
• Assignee: Kirk True
• Reporter: Kirk True
• Reviewer: David Jacot
• Created: 10/Nov/21 19:19
• Updated: 29/Jun/23 21:07
• Resolved: 15/Nov/21 09:10

Description

The OAuth code logs the access token on both the client and the server, potentially exposing service account details. Remove all logging entries to prevent this from leaking.

Issue Links

• links to: GitHub Pull Request #11489