From 0b0f38f49cb61c644b32c5da213bc0a25621f701 Mon Sep 17 00:00:00 2001
From: Dominick Baier <dbaier@leastprivilege.com>
Date: Sat, 3 Oct 2020 16:35:00 +0200
Subject: [PATCH] use Obfuscate extension method

---
 .../src/Extensions/StringsExtensions.cs               | 11 +++++++++++
 .../src/Logging/Models/TokenRequestValidationLog.cs   |  4 ++--
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/src/IdentityServer4/src/Extensions/StringsExtensions.cs b/src/IdentityServer4/src/Extensions/StringsExtensions.cs
index f9617888c5..36c8ffee60 100644
--- a/src/IdentityServer4/src/Extensions/StringsExtensions.cs
+++ b/src/IdentityServer4/src/Extensions/StringsExtensions.cs
@@ -264,5 +264,16 @@ public static string GetOrigin(this string url)
 
             return null;
         }
+        
+        public static string Obfuscate(this string value)
+        {
+            var last4Chars = "****";
+            if (value.IsPresent() && value.Length > 4)
+            {
+                last4Chars = value.Substring(value.Length - 4);
+            }
+
+            return "****" + last4Chars;
+        }
     }
 }
\ No newline at end of file
diff --git a/src/IdentityServer4/src/Logging/Models/TokenRequestValidationLog.cs b/src/IdentityServer4/src/Logging/Models/TokenRequestValidationLog.cs
index ca2dad67ef..7e8431d395 100644
--- a/src/IdentityServer4/src/Logging/Models/TokenRequestValidationLog.cs
+++ b/src/IdentityServer4/src/Logging/Models/TokenRequestValidationLog.cs
@@ -43,8 +43,8 @@ public TokenRequestValidationLog(ValidatedTokenRequest request, IEnumerable<stri
             }
 
             GrantType = request.GrantType;
-            AuthorizationCode = request.AuthorizationCodeHandle;
-            RefreshToken = request.RefreshTokenHandle;
+            AuthorizationCode = request.AuthorizationCodeHandle.Obfuscate();
+            RefreshToken = request.RefreshTokenHandle.Obfuscate();
             UserName = request.UserName;
         }