Redact conn secrets in webserver logs

[msumit]

Found sensitive connection attributes in webserver logs while testing a connection from UI.

Before:

[2021-06-22 12:00:32,341] {base.py:80} INFO - Using connection to: id: VmAyCbqf. Host: https://www.httpbin.org/, Port: None, Schema: , Login: admin, Password: admin, extra: {'access_token': '123456', 'foo': 'bar'}

After:

[2021-06-22 12:04:14,162] {base.py:80} INFO - Using connection to: id: 4P0GvhP3. Host: https://www.httpbin.org/, Port: None, Schema: , Login: admin, Password: ***, extra: {'access_token': '***', 'foo': 'bar'}

---

^ Add meaningful description above

Read the Pull Request Guidelines for more information.
In case of fundamental code change, Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in UPDATING.md.

[ashb]

Ah, yeah I'd changed it to only redact the Task logs.

The other option would be to have the redact filter apply to all of the webserver logs, but that feels heavy weight.

Is the Test Connection button available in 2.1 or is it new in main/2.2? Yup, just checked, new in 2.2.

[msumit]

Ah, yeah I'd changed it to only redact the Task logs.

The other option would be to have the redact filter apply to all of the webserver logs, but that feels heavy weight.

Is the Test Connection button available in 2.1 or is it new in main/2.2? Yup, just checked, new in 2.2.

Yeah, I too thought it to apply for all logs, but then it feels like overburdening web server, hence used specifically.

[uranusjr]

Since BaseHook.get_connection() is public API, this should probably still be backported to 2.1. See #17021.

[potiuk]

God call. Marked it as 2.1.3