trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

sources/oauth: prevent potentially confidential data from being logged 

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer 2021-09-07 11:05:18 +02:00
parent eeb755ab7d
commit 3c6aac5435
3 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
authentik/sources/oauth/clients/base.py
View File

@ -43,7 +43,6 @@ class BaseOAuthClient:
profile_url = self.source.profile_url profile_url = self.source.profile_url
try: try:
response = self.do_request("get", profile_url, token=token) response = self.do_request("get", profile_url, token=token)
LOGGER.debug(response.text)
response.raise_for_status() response.raise_for_status()
except RequestException as exc: except RequestException as exc:
LOGGER.warning("Unable to fetch user profile", exc=exc) LOGGER.warning("Unable to fetch user profile", exc=exc)

1
authentik/sources/oauth/clients/oauth2.py
View File

@ -65,7 +65,6 @@ class OAuth2Client(BaseOAuthClient):
data=args, data=args,
headers=self._default_headers, headers=self._default_headers,
) )
LOGGER.debug(response.text)
response.raise_for_status() response.raise_for_status()
except RequestException as exc: except RequestException as exc:
LOGGER.warning("Unable to fetch access token", exc=exc) LOGGER.warning("Unable to fetch access token", exc=exc)

1
authentik/sources/oauth/types/azure_ad.py
View File

@ -36,7 +36,6 @@ class AzureADClient(OAuth2Client):
profile_url, profile_url,
headers={"Authorization": f"{token['token_type']} {token['access_token']}"}, headers={"Authorization": f"{token['token_type']} {token['access_token']}"},
) )
LOGGER.debug(response.text)
response.raise_for_status() response.raise_for_status()
except RequestException as exc: except RequestException as exc:
LOGGER.warning("Unable to fetch user profile", exc=exc) LOGGER.warning("Unable to fetch user profile", exc=exc)