fix(st2common/router): don't log sensitive information

StackStorm · Oct 5, 2023 · 2ff818d · 2ff818d
1 parent 6f5ac8a
commit 2ff818d
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/st2common/st2common/router.py b/st2common/st2common/router.py
@@ -328,7 +328,12 @@ def __call__(self, req):
 
         At the time of writing, the only property being utilized by middleware was `x-log-result`.
         """
-        LOG.debug("Received call with WebOb: %s", req)
+        LOG.debug("Received call with WebOb: %s %s", req.method, req.url)
+        # if a more detailed log is required:
+        # loggable_req = req.copy()
+        # loggable_req.headers.pop('Authorization', None)
+        # loggable_req.headers.pop('X-Request-Id', None)
+        # LOG.debug("Received call with WebOb: %s", loggable_req)
         endpoint, path_vars = self.match(req)
         LOG.debug("Parsed endpoint: %s", endpoint)
         LOG.debug("Parsed path_vars: %s", path_vars)