From 96918219042d65f71fb3ac0845ff3659c0464ab8 Mon Sep 17 00:00:00 2001 From: Samir Shetty Date: Wed, 30 Oct 2024 11:54:05 -0700 Subject: [PATCH] Remove debug logging of authz header --- CHANGELOG.md | 5 +++++ conjurapi/requests.go | 2 -- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 235c324..154f34a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] +## [0.12.6] - 2024-10-30 + +### Security +- Remove debug logging of "Authorization" header when processing requests (CNJR-7025) + ## [0.12.5] - 2024-10-23 ### Added diff --git a/conjurapi/requests.go b/conjurapi/requests.go index bbad82f..c436a46 100644 --- a/conjurapi/requests.go +++ b/conjurapi/requests.go @@ -9,7 +9,6 @@ import ( "strings" "github.com/cyberark/conjur-api-go/conjurapi/authn" - "github.com/cyberark/conjur-api-go/conjurapi/logging" ) func makeFullId(account, kind, id string) string { @@ -91,7 +90,6 @@ func (c *Client) SubmitRequest(req *http.Request) (resp *http.Response, err erro } func (c *Client) submitRequestWithCustomAuth(req *http.Request) (resp *http.Response, err error) { - logging.ApiLog.Debugf("req: %+v\n", req) resp, err = c.httpClient.Do(req) if err != nil { return