Security concern : Steam login token present in clear text in the log files

[SeleDreams]

Required checklist

• I searched existing GitHub issues and did not find this exact bug.
• I searched online and did not find a fix for this exact bug.
• I asked in the EmuReady Discord GameHub Lite channels and could not solve it there.
• I added enough steps to reproduce the exact issue.
• I understand that incomplete bug reports may be closed.

Device

any

SoC

any

Android version

any

GameHub Lite version and package

5.1.7

Game or component

any

Issue area

Other

Summary

When playing any steam game, the log file contains the steam login token in clear text, making the log file dangerous to distribute for troubleshooting.

Steps to reproduce

1. Launch a Steam game through GameHub
2. Recover the log files generated at Android/data/gamehub.lite/files/log/

Expected result

The Steam login token shouldn't appear in the logs, at least not fully in clear text

Actual result

Beginners who post their logs end up posting their login tokens publicly for everyone

Container settings

any

Logs

Logs are not relevant for this report, and I explained why below.

Logs and troubleshooting notes

I cannot securely post logs containing my own steam login token. I however can post this edited screenshot showing the concerning parts with the token censored

Additional information

No response

[SeleDreams]

Update : It seems to also log tokens relative to QR code login under different names (accessToken and refreshToken).
I don't know if it logs for other accounts (such as gog and epic games). It should be checked