starred/panel
1
0
Fork 0
mirror of https://github.com/pelican-dev/panel.git synced 2026-02-24 19:08:53 +03:00
Code Issues 42 Packages Projects Releases 12 Wiki Activity

[PR #1504] [MERGED] Filters sensitive credential fields from auth:fail logs #1417

New Issue
Closed
opened 2026-02-04 19:45:08 +03:00 by OVERLORD · 0 comments
OVERLORD commented 2026-02-04 19:45:08 +03:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/pelican-dev/panel/pull/1504
Author: @Regen1337
Created: 7/9/2025
Status: ✅ Merged
Merged: 7/17/2025
Merged by: @lancepioch

Base: main ← Head: main

📝 Commits (2)

  • 4431d41 Refactored authentication logging to protect sensitive fields from being exposed in auth:fail logs
  • a787902 pint

📊 Changes

1 file changed (+7 additions, -1 deletions)

View changed files

📝 app/Listeners/Auth/AuthenticationListener.php (+7 -1)

📄 Description

This patch filters sensitive credential fields during logging, ensuring only safe identifiers (email, username, IP, useragent) are recorded while maintaining the current audit trail functionality.

I also propose purging auth:fail logs in the next update so that any currently logged data is cleared.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/pelican-dev/panel/pull/1504 **Author:** [@Regen1337](https://github.com/Regen1337) **Created:** 7/9/2025 **Status:** ✅ Merged **Merged:** 7/17/2025 **Merged by:** [@lancepioch](https://github.com/lancepioch) **Base:** `main` ← **Head:** `main` --- ### 📝 Commits (2) - [`4431d41`](https://github.com/pelican-dev/panel/commit/4431d417ef5538cb132a8eedd5c20d0702cbb27e) Refactored authentication logging to protect sensitive fields from being exposed in auth:fail logs - [`a787902`](https://github.com/pelican-dev/panel/commit/a787902d52d013334edd94dab251b8f95871e5da) pint ### 📊 Changes **1 file changed** (+7 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `app/Listeners/Auth/AuthenticationListener.php` (+7 -1) </details> ### 📄 Description This patch filters sensitive credential fields during logging, ensuring only safe identifiers (email, username, IP, useragent) are recorded while maintaining the current audit trail functionality. I also propose purging auth:fail logs in the next update so that any currently logged data is cleared. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
OVERLORD added the pull-request label 2026-02-04 19:45:08 +03:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
not confirmed
pull-request
Mirrored from GitHub Pull Request
 👑 sponsor
💰 fund
🔴 hard
🟡 medium
🟡 medium
🟡 medium
🟢 easy
🟢 easy
🟢 easy
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/panel#1417
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?