Skip to content

Redact sensitive HTTP headers in debug logging#198

Open
yfei-a wants to merge 1 commit intomainfrom
bugfix/logging
Open

Redact sensitive HTTP headers in debug logging#198
yfei-a wants to merge 1 commit intomainfrom
bugfix/logging

Conversation

@yfei-a
Copy link
Copy Markdown
Member

@yfei-a yfei-a commented Apr 24, 2026

Redact sensitive header values in driver debug logs by default, including authorization, cookie, opc-obo-token, and security-context headers.

Add LogUtil helpers for formatting and redacting headers, update request/response and federation auth logging to use them, and add tests plus a changelog entry. Full header logging can still be enabled with the com.oracle.nosql.sdk.nosqldriver.log-sensitive-headers system property.

Redact sensitive header values in driver debug logs by default,
including authorization, cookie, opc-obo-token, and
security-context headers.

Add LogUtil helpers for formatting and redacting headers, update
request/response and federation auth logging to use them, and add
tests plus a changelog entry. Full header logging can still be
enabled with the com.oracle.nosql.sdk.nosqldriver.log-sensitive-headers
system property.
@yfei-a yfei-a requested a review from connelly38 April 24, 2026 15:31
@oracle-contributor-agreement oracle-contributor-agreement Bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Apr 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant