Skip to content

Commit 9d53fb7

Browse files
committed
fix: only expose safe fields from GitHub error response
1 parent 7f0f860 commit 9d53fb7

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

src/VCS/Adapter/Git/GitHub.php

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -638,7 +638,8 @@ protected function generateAccessToken(string $privateKey, ?string $appId): void
638638
$responseBody = $response['body'] ?? [];
639639
$statusCode = $response['headers']['status-code'] ?? 0;
640640
if (!array_key_exists('token', $responseBody)) {
641-
throw new Exception('Failed to retrieve access token from GitHub API. Status: ' . $statusCode . '. Response: ' . \json_encode($responseBody));
641+
$safeBody = \is_array($responseBody) ? \json_encode(\array_intersect_key($responseBody, \array_flip(['message', 'documentation_url']))) : '';
642+
throw new Exception('Failed to retrieve access token from GitHub API. Status: ' . $statusCode . '. Response: ' . $safeBody);
642643
}
643644
$this->accessToken = $responseBody['token'] ?? '';
644645
}

0 commit comments

Comments
 (0)