Passwords in UI and CLI displayed in plain text

[minsis]

SUMMARY

UI and CLI clients both show clear text passwords when viewing the config

STACKSTORM VERSION

Paste the output of st2 --version:

st2 3.3.0, on Python 3.6.9

OS, environment, install method

Oracle 7 using st2-docker

Steps to reproduce the problem

Here I'm just using the core.remote action on an interval timer

Expected Results

Password shouldn't be displayed in clear text in the config. When going to edit or run the action the password is hidden.

Actual Results

What happened? What output did you get?

Making sure to follow these steps will guarantee the quickest resolution possible.

Thanks!

[blag]

To be clear, the issue here is that, in the rule widget, action parameters and action runner parameters that are marked secret: true are not properly obfuscated by the server.

This probably also happens for the passphrase, private_key, and sudo_password parameters to the remote runner.

[stale]

Thanks for contributing to this issue. As it has been 90 days since the last activity, we are automatically marking is as stale. If this issue is not relevant or applicable anymore (problem has been fixed in a new version or similar), please close the issue or let us know so we can close it. On the contrary, if the issue is still relevant, there is nothing you need to do, but if you have any additional details or context which would help us when working on this issue, please include it as a comment to this issue.

[blag]

A better place to report this might be https://github.com/StackStorm/st2web.

[minsis]

Moved to StackStorm/st2web#896