-
Notifications
You must be signed in to change notification settings - Fork 3.4k
Closed
Description
Context
- Starting from
azure-core1.13.0,Authorizationheader is now exposed in DEBUG log (Make NetworkTraceLoggingPolicy show the auth token in plain text azure-sdk-for-python#17424). - Python SDK decided not to redact
x-ms-authorization-auxiliaryheader (x-ms-authorization-auxiliary header should be redacted azure-sdk-for-python#17271).
Before bumping azure-core to 1.13.0, Azure CLI must adapt to azure-core's new behavior.
Proposed solutions
For tokens in Authorization and x-ms-authorization-auxiliary:
- Keep the current behavior and redact tokens.
- Expose tokens in
--debugmode like the newNetworkTraceLoggingPolicy.- Unconditionally do so, but redact tokens in
--verbose. - Make a config like
az config set logging.show_tokens=True.
- Unconditionally do so, but redact tokens in
Reactions are currently unavailable