From 55b836b31973af1b9c4693dac60eb1cd3c332edb Mon Sep 17 00:00:00 2001 From: Sumit Maheshwari Date: Tue, 22 Jun 2021 14:40:45 +0530 Subject: [PATCH] Redact conn secrets in webserver logs (#16579) (cherry picked from commit 2a59de3e558e3b60caad876dee8fa4b43a7a17cf) (cherry picked from commit 9ac87a9cfeb04db2e96adcc5596d5c1bf55680ad) (cherry picked from commit 836803b6497adabba5d22590c4fe797e17dbdb2c) --- airflow/hooks/base.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/airflow/hooks/base.py b/airflow/hooks/base.py index 486e0517ed1c2..d50a207efdf8b 100644 --- a/airflow/hooks/base.py +++ b/airflow/hooks/base.py @@ -23,6 +23,7 @@ from airflow.models.connection import Connection from airflow.typing_compat import Protocol from airflow.utils.log.logging_mixin import LoggingMixin +from airflow.utils.log.secrets_masker import redact log = logging.getLogger(__name__) @@ -70,8 +71,8 @@ def get_connection(cls, conn_id: str) -> Connection: conn.port, conn.schema, conn.login, - conn.password, - conn.extra_dejson, + redact(conn.password), + redact(conn.extra_dejson), ) return conn