Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BTS-580] Trim password field from payload in arangorestore error messages #15308

Merged
merged 5 commits into from
Dec 9, 2021

Conversation

cpjulia
Copy link
Contributor

@cpjulia cpjulia commented Dec 9, 2021

Scope & Purpose

This PR fixes the error messages on the client requests of arangorestore displaying passwords in plain text, trimming the json fields from the payload that display the password.
The server code still has to be changed and would require some extra thought into it.
Examples of error messages displaying the password in plain text, as in the ticket https://arangodb.atlassian.net/browse/BTS-580:

2021-09-13T15:45:52Z [4120] ERROR [7a35f] {restore} Could not create database '😀': got invalid response from server: HTTP 400: 'database name invalid' while executing creating database' with this payload: '{"name":"😀","options":{"replicationFactor":1},"users":[{"username":"root","passwd":"hustensaft"}]}'
2021-09-13T15:45:52Z [4120] ERROR [cb69f] {restore} got invalid response from server: HTTP 400: 'database name invalid' while executing creating database' with this payload: '{"name":"😀","options":{"replicationFactor":1},"users":[{"username":"root","passwd":"hustensaft"}]}'
  • 💩 Bugfix (requires CHANGELOG entry)
  • 🍕 New feature (requires CHANGELOG entry, feature documentation and release notes)
  • 🔥 Performance improvement
  • 🔨 Refactoring/simplification
  • 📖 CHANGELOG entry made

Backports:

No backports required.

Related Information

Testing & Verification

  • This change is a trivial rework / code cleanup without any test coverage.
  • The behavior in this PR was manually tested
  • This change is already covered by existing tests, such as (please describe tests).
  • This PR adds tests that were used to verify all changes:
    • Added new C++ Unit tests Obs.: actually edits an existing test
    • Added new integration tests (e.g. in shell_server / shell_server_aql)
    • Added new resilience tests (only if the feature is impacted by failovers)
  • There are tests in an external testing repository:
  • I ensured this code runs with ASan / TSan or other static verification tools

@cpjulia cpjulia requested a review from a team as a code owner December 9, 2021 05:49
@cpjulia cpjulia changed the title Feature/bts 580 [BTS-580] Trim password field from payload in arangorestore error messages Dec 9, 2021
@jsteemann jsteemann added this to the devel milestone Dec 9, 2021
Copy link
Contributor

@jsteemann jsteemann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@jsteemann jsteemann merged commit 5970989 into devel Dec 9, 2021
@jsteemann jsteemann deleted the feature/BTS_580 branch December 9, 2021 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants