Cutlery/Kyoo
1
0
Fork 0
mirror of https://github.com/zoriya/Kyoo.git synced 2025-12-07 21:55:15 -05:00
Code Issues Packages Projects Releases Wiki Activity

kyoo_api logs redact password & other sensitive fields (#1182)

Browse Source
This commit is contained in:
acelinkio 2025-11-28 08:42:27 -08:00 committed by GitHub
parent 28d2e193aa
commit e7d9002156
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
api/src/db/index.ts
View File

@ -23,8 +23,10 @@ const config: PoolConfig = {
async function parseSslConfig(): Promise<PoolConfig> { async function parseSslConfig(): Promise<PoolConfig> {
// Due to an upstream bug, if `ssl` is not falsey, an SSL connection will always be attempted. This means // Due to an upstream bug, if `ssl` is not falsey, an SSL connection will always be attempted. This means
// that non-SSL connection options under `ssl` (which is incorrectly named) cannot be set unless SSL is enabled. // that non-SSL connection options under `ssl` (which is incorrectly named) cannot be set unless SSL is enabled.
if (!process.env.PGSSLMODE || process.env.PGSSLMODE === "disable") if (!process.env.PGSSLMODE || process.env.PGSSLMODE === "disable") {
config.ssl = false;
return config; return config;
}
// Despite this field's name, it is used to configure everything below the application layer. // Despite this field's name, it is used to configure everything below the application layer.
const ssl: ConnectionOptions = {}; const ssl: ConnectionOptions = {};
@ -113,6 +115,19 @@ const postgresConfig = await parseSslConfig();
// use this when using drizzle-kit since it can't parse await statements // use this when using drizzle-kit since it can't parse await statements
// const postgresConfig = config; // const postgresConfig = config;
console.log("Connecting to postgres with config", {
...postgresConfig,
password: postgresConfig.password ? "<redacted>" : undefined,
ssl:
postgresConfig.ssl && typeof postgresConfig.ssl === "object"
? {
...postgresConfig.ssl,
key: "<redacted>",
cert: "<redacted>",
ca: "<redacted>",
}
: postgresConfig.ssl,
});
export const db = drizzle({ export const db = drizzle({
schema, schema,
connection: postgresConfig, connection: postgresConfig,