Skip to content

Remove token from log message on token_test error#1134

Merged
AttackingOrDefending merged 1 commit into
lichess-bot-devs:masterfrom
MarkZH:fix-token-leak-to-log
Sep 25, 2025
Merged

Remove token from log message on token_test error#1134
AttackingOrDefending merged 1 commit into
lichess-bot-devs:masterfrom
MarkZH:fix-token-leak-to-log

Conversation

@MarkZH

@MarkZH MarkZH commented Sep 24, 2025

Copy link
Copy Markdown
Collaborator

Type of pull request:

  • Bug fix
  • Feature
  • Other

Description:

Removes the user's bot token from the error message before logging. This will prevent the leaking of lichess tokens when posting logs for troubleshooting.

Related Issues:

Closes #1133

Checklist:

  • I have read and followed the contribution guidelines.
  • I have added necessary documentation (if applicable).
  • The changes pass all existing tests.

Screenshots/logs (if applicable):

@AttackingOrDefending AttackingOrDefending merged commit 30dd101 into lichess-bot-devs:master Sep 25, 2025
23 checks passed
@MarkZH MarkZH deleted the fix-token-leak-to-log branch October 1, 2025 23:27
r0950336 pushed a commit to r0950336/lichess-bot that referenced this pull request Dec 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

backoff_handler leaks tokens to log file

2 participants