{"action":"opened","issue":{"url":"https://api.github.com/repos/privacyidea/privacyidea/issues/590","repository_url":"https://api.github.com/repos/privacyidea/privacyidea","labels_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/590/labels{/name}","comments_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/590/comments","events_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/590/events","html_url":"https://github.com/privacyidea/privacyidea/issues/590","id":199568923,"number":590,"title":"Hide passwords in debug log with log level 10 (=debug) does not work anymore","user":{"login":"berndnicklas","id":4263918,"avatar_url":"https://avatars.githubusercontent.com/u/4263918?v=3","gravatar_id":"","url":"https://api.github.com/users/berndnicklas","html_url":"https://github.com/berndnicklas","followers_url":"https://api.github.com/users/berndnicklas/followers","following_url":"https://api.github.com/users/berndnicklas/following{/other_user}","gists_url":"https://api.github.com/users/berndnicklas/gists{/gist_id}","starred_url":"https://api.github.com/users/berndnicklas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/berndnicklas/subscriptions","organizations_url":"https://api.github.com/users/berndnicklas/orgs","repos_url":"https://api.github.com/users/berndnicklas/repos","events_url":"https://api.github.com/users/berndnicklas/events{/privacy}","received_events_url":"https://api.github.com/users/berndnicklas/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-01-09T14:45:37Z","updated_at":"2017-01-09T14:45:37Z","closed_at":null,"body":"# Versions\r\n\r\nprivacyIDEA: 17dev (Last commit b0291eff731c5fb20636d41d361cdac8cf5f69d3)\r\n\r\nInstallation method:\r\n\r\n- from source / github\r\n- Debian\r\n\r\n## more details: \r\n\r\nOS: Debian Jessie\r\n\r\nWebserver: NGINX / UWSGI\r\n\r\nTokendatabase: PostgreSQL\r\n\r\n# What did you try to do?\r\n\r\nSet `PI_LOGLEVEL = 10` and restarted all privacyidea workers.\r\n\r\n# What outcome did you expect?\r\n\r\nIn log level 10 I expected to have log files with passwords excluded (see #408).\r\n\r\n# What outcome did you experience?\r\n\r\nThe password (here: 'SECRET_PASSWORD_123') is included. Also, it's included two times, which could point to another bug (?).\r\n\r\n# Log file\r\n\r\n[2017-01-09 14:34:32,467][19270][139989706606464][DEBUG][privacyidea.lib.token:179] Entering check_user_pass with arguments (User(login=u'user1', realm=u'staff', resolver=''), u'SECRET_PASSWORD_123', {'clientip': '1.2.3.4', 'realm': u'staff', 'user': u'user1', 'g': <flask.g of 'privacyidea.app'>, 'pass': u'SECRET_PASSWORD_123'}) and keywords {}"}}
{"actor":{"display_login":"berndnicklas"}}