Skip to content
This repository has been archived by the owner on Jul 31, 2024. It is now read-only.

Introduce LoggingOptions.AuthorizeRequestSensitiveValuesFilter #4744

Conversation

mustakimali
Copy link
Contributor

@mustakimali mustakimali commented Aug 12, 2020

We take some sensitive parameters with the "AuthorizeRequest" endpoint with some ICustomAuthorizeRequestValidator implementation to validate them.

We don't want those sensitive parameters be logged when the validation fails.

This commit introduces AuthorizeRequestSensitiveValuesFilter similar to TokenRequestSensitiveValuesFilter. This will allow us customize which parameter gets scrubbed.

@mustakimali mustakimali force-pushed the tokenrequestsensitivevaluesfilter branch 2 times, most recently from 56e6b67 to ed4b84a Compare August 13, 2020 09:59
@mustakimali mustakimali marked this pull request as ready for review August 13, 2020 10:00
We take some sensitive parameters with the "AuthorizeRequest" endpoint with some ICustomAuthorizeRequestValidator implementation to validate them.

We don't want those sensitive parameters be logged when the validation fails.

This commit introduces `AuthorizeRequestSensitiveValuesFilter` similar to `TokenRequestSensitiveValuesFilter`. This will allow us customize which parameter gets scrubbed.
@mustakimali mustakimali force-pushed the tokenrequestsensitivevaluesfilter branch from ed4b84a to 6a93eb7 Compare August 13, 2020 10:43
@brockallen brockallen added this to the 4.0.5 milestone Sep 7, 2020
@leastprivilege
Copy link
Member

Thanks!

@leastprivilege leastprivilege merged commit 3f489b7 into IdentityServer:main Sep 9, 2020
@mustakimali mustakimali deleted the tokenrequestsensitivevaluesfilter branch September 9, 2020 23:16
@github-actions
Copy link

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 10, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants