Merge pull request #405 from Harishrs2006/fix/oauth-token-leak-login-log

Harsh4902 · web-flow · commit 99865c1c6f68 · 2026-05-25T09:36:30.000+05:30
fix(login): remove unconditional logging of OAuth2 access and refresh tokens
diff --git a/cmd/login.go b/cmd/login.go
@@ -293,8 +293,6 @@ func oauth2login(
 	ctx, cancel := context.WithTimeout(ctx, 1*time.Second)
 	defer cancel()
 	_ = srv.Shutdown(ctx)
-	log.Printf("Token: %s\n", tokenString)
-	log.Printf("Refresh Token: %s\n", refreshToken)
 	return tokenString, refreshToken
 }
 

Original file line number	Diff line number	Diff line change
`@@ -293,8 +293,6 @@ func oauth2login(`
`293`	`293`	`ctx, cancel := context.WithTimeout(ctx, 1*time.Second)`
`294`	`294`	`defer cancel()`
`295`	`295`	`_ = srv.Shutdown(ctx)`
`296`		`- log.Printf("Token: %s\n", tokenString)`
`297`		`- log.Printf("Refresh Token: %s\n", refreshToken)`
`298`	`296`	`return tokenString, refreshToken`
`299`	`297`	`}`
`300`	`298`