Uploaded image for project: 'Apache Knox'
  1. Apache Knox
  2. KNOX-2572

Unique token identifiers still being logged in entirety

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.6.0
    • 1.6.0
    • Server
    • None

    Description

      The ZookeeperTokenStateService and AliasBasedTokenStateService implementations are still logging JWT token UUIDs in their entirety, apparently missed by KNOX-2561.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. KNOX-2578 TokenResource logging token UUIDs

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. KNOX-2561 Unique token identifiers must be truncated when logged now that they can be used as secrets

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #432

          Activity

            People

              pzampino Philip Zampino
              pzampino Philip Zampino
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 40m
                  40m