Password encrypted

Password encrypted in log table.
PRE-PRODUCTION-2026
Naeem Ullah 3 days ago
parent 9a43f523a8
commit 16cbce7ed0

@ -64,7 +64,13 @@ public class LoggingFilter extends OncePerRequestFilter {
log.setDateTime(startTime);
log.setMethod(request.getMethod());
log.setRequestUri(request.getRequestURI());
log.setRequestBody(requestBody);
if("/aconnect/authentication/login".equals(request.getRequestURI()) || "/aconnect/signin".equals(request.getRequestURI())){
String maskedBody = maskPassword(requestBody);
log.setRequestBody(maskedBody);
}else{
log.setRequestBody(requestBody);
}
log.setRemoteIp(request.getRemoteAddr());
log.setResponseCode(response.getStatus());
@ -110,4 +116,16 @@ public class LoggingFilter extends OncePerRequestFilter {
return "Error reading request body: " + e.getMessage();
}
}
private String maskPassword(String jsonString) {
if (jsonString == null || !jsonString.contains("password")) {
return jsonString;
}
// Simple regex approach
return jsonString.replaceAll(
"(\"password\"\\s*:\\s*\")[^\"]*(\")",
"$1********$2"
);
}
}

Loading…
Cancel
Save