Hide token in the log file for SetAccessToken (#1434)

Fixes #1433
igvteam · Nov 15, 2023 · 988198c · 988198c
1 parent 11b0971
commit 988198c
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/main/java/org/broad/igv/batch/CommandListener.java b/src/main/java/org/broad/igv/batch/CommandListener.java
@@ -181,7 +181,12 @@ private void processClientSession(CommandExecutor cmdExe) throws IOException {
 
                 String cmd = inputLine;
                 if (!cmd.contains("/oauthCallback")) {
-                    log.info(cmd);
+                    if (cmd.startsWith("SetAccessToken")) {
+                        log.info(cmd.substring(0,14) + " *****");
+                    }
+                    else {
+                        log.info(cmd);
+                    }
                 }
 
                 boolean isHTTP = cmd.startsWith("OPTIONS") || cmd.startsWith("HEAD") || cmd.startsWith("GET");