safety(api-gateway): remove debug token logging from JWT interceptor
Removed error!() call that logged the full JWT token on decode failure. This was a security risk - tokens should never appear in logs. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -369,11 +369,6 @@ impl JwtService {
|
||||
let token_data =
|
||||
decode::<JwtClaims>(token, &self.decoding_key, &self.validation).map_err(|e| {
|
||||
error!("JWT decode failed in interceptor: {:?}", e);
|
||||
error!("FULL TOKEN FOR DEBUGGING: {}", token);
|
||||
error!(
|
||||
"Token (first 50 chars): {}...",
|
||||
&token[..50.min(token.len())]
|
||||
);
|
||||
let issuer_str = self
|
||||
.validation
|
||||
.iss
|
||||
|
||||
Reference in New Issue
Block a user