Skip to content

Commit

Permalink
Mask value if the key is token (apache#16474)
Browse files Browse the repository at this point in the history
Some connections (including the databricks connection) use the key 'token' in the 'extra' field (this has always been the case). Including it here so that these sensitive tokens are also masked by default.

The prior implementation just masked all of the 'extra' json: "XXXXXXXX" if conn.extra_dejson else None https://github.com/apache/airflow/blob/88199eefccb4c805f8d6527bab5bf600b397c35e/airflow/hooks/base.py#L78

(cherry picked from commit d1d04fe)
  • Loading branch information
robertsaxby authored and jhtimmins committed Jul 9, 2021
1 parent 9b0b0c6 commit 24f3f63
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions airflow/utils/log/secrets_masker.py
Expand Up @@ -55,6 +55,7 @@
'password',
'private_key',
'secret',
'token',
}
)
"""Names of fields (Connection extra, Variable key name etc.) that are deemed sensitive"""
Expand Down

0 comments on commit 24f3f63

Please sign in to comment.