Merge pull request #87 from uselagoon/no-token-logs

fix: do not log user token value
uselagoon · Jul 20, 2022 · eae1971 · eae1971
2 parents 4051889 + 901908f
commit eae1971
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/internal/keycloak/client.go b/internal/keycloak/client.go
@@ -129,8 +129,7 @@ func (c *Client) UserRolesAndGroups(ctx context.Context,
 	if err != nil {
 		return nil, nil, nil, fmt.Errorf("couldn't get user token: %v", err)
 	}
-	c.log.Debug("got user token", zap.String("access token",
-		userToken.AccessToken))
+	c.log.Debug("got user token")
 	// parse and extract verified attributes
 	tok, err := jwt.ParseSigned(userToken.AccessToken)
 	if err != nil {