[thopkins32]

The startup log currently dumps the full Settings object, which can include single_user_api_key and secret_keys. Redact those fields so they do not appear in logs.

[dmgav]

Since we are preparing to extend logging capabilities, we may need more robust solution that prevents accidental printing. For example, the secrets can be represented as pydantic.SecretStr type and URI can be represented as sqlalchemy.engine.url.URL:

In [2]: from pydantic import SecretStr

In [3]: a = SecretStr("Hello")

In [4]: print(a)
**********

In [5]: a
Out[5]: SecretStr('**********')

In [6]: a.get_secret_value()
Out[6]: 'Hello'


In [13]: from sqlalchemy.engine import make_url

In [14]: uri = "postgresql://user:hunter2@host:5432/db"

In [15]: url = make_url(uri) 

In [16]: url
Out[16]: postgresql://user:***@host:5432/db

In [17]: url.render_as_string(hide_password=False)
Out[17]: 'postgresql://user:hunter2@host:5432/db'

Tiled is currently using SecretStr to store access token https://github.com/bluesky/tiled/blob/49fe22daae308237470d739b2f87622319f4e81c/tiled/server/schemas.py#L432, the other secrets are stored as strings, so they potentially can leak into logs. @genematx

[thopkins32]

Can we merge this in the interim? @dmgav