Commit 5dec98b
authored
fix: do not expose operator private key in logs or error messages (#59)
* fix: do not include operator private key in config error message
`parsePrivateKey` interpolated the raw key string into the
`IllegalArgumentException` message. That message is printed by Spring's
startup failure banner and ends up in container, CI and aggregated logs.
Drop the value from the message; keep the original cause for diagnostics.
Signed-off-by: Alejandro <26930485+alejandroGM0@users.noreply.github.com>
* fix: redact operator private key in TestConfigSource log output
`TestConfigSource` iterated all properties and logged them at INFO,
including `hiero.privateKey`. The dotenv passthrough above already
filters the key out as sensitive, so the log statement contradicted
that intent and exposed the value on every test run (including in CI
logs). Redact the value when the key is `hiero.privateKey`.
Signed-off-by: Alejandro <26930485+alejandroGM0@users.noreply.github.com>
---------
Signed-off-by: Alejandro <26930485+alejandroGM0@users.noreply.github.com>1 parent 878109a commit 5dec98b
2 files changed
Lines changed: 4 additions & 3 deletions
File tree
- hiero-enterprise-microprofile/src/test/java/org/hiero/microprofile/test
- hiero-enterprise-spring/src/main/java/org/hiero/spring/implementation
Lines changed: 3 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
48 | 48 | | |
49 | 49 | | |
50 | 50 | | |
51 | | - | |
| 51 | + | |
| 52 | + | |
| 53 | + | |
52 | 54 | | |
53 | 55 | | |
54 | 56 | | |
| |||
Lines changed: 1 addition & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
91 | 91 | | |
92 | 92 | | |
93 | 93 | | |
94 | | - | |
95 | | - | |
| 94 | + | |
96 | 95 | | |
97 | 96 | | |
98 | 97 | | |
| |||
0 commit comments