Redact conn secrets in webserver logs (#16579)

(cherry picked from commit 2a59de3)
apache · Aug 9, 2021 · 4d2db2e · 4d2db2e
1 parent 88fd2db
commit 4d2db2e
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/airflow/hooks/base.py b/airflow/hooks/base.py
@@ -22,6 +22,7 @@
 
 from airflow.typing_compat import Protocol
 from airflow.utils.log.logging_mixin import LoggingMixin
+from airflow.utils.log.secrets_masker import redact
 
 if TYPE_CHECKING:
     from airflow.models.connection import Connection  # Avoid circular imports.
@@ -74,8 +75,8 @@ def get_connection(cls, conn_id: str) -> "Connection":
                 conn.port,
                 conn.schema,
                 conn.login,
-                conn.password,
-                conn.extra_dejson,
+                redact(conn.password),
+                redact(conn.extra_dejson),
             )
         return conn