Hide common>conf data from request payload for unauthenticated users

[jllucas]

Hi,

For security reasons, I got the requirement of hiding some fields from request payload for unauthenticated users.

I tried:;
curl -skL 'https://<superset-url>/login/' | grep -oP 'data-bootstrap="\K[^"]+' | python3 -c "import sys,html,json; print(json.dumps(json.loads(html.unescape(sys.stdin.read())), indent=2))" | grep -E 'AUTH_PROVIDERS|AUTH_USER|WEBSOCKET|version_string'
And it shows sensitive data.

Is this feasible? if so, how?

Thanks.