Merge pull request #151 from silinternational/feature/log-redacted-ap…

…iSecret-if-incorrect If the API Secret is NOT valid, log its first and last few characters
silinternational · May 6, 2024 · 5347736 · 5347736
2 parents e265811 + 92fab81
commit 5347736
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/models/api-key.js b/models/api-key.js
@@ -182,6 +182,8 @@ const isValidApiSecret = (apiKeyRecord, apiSecret = '') => {
   const isValid = password.compare(apiSecret, apiKeyRecord.hashedApiSecret);
   if (isValid !== true) {
     console.log('The given API Secret is NOT valid for the given API Key record.');
+    const redactedApiSecret = apiSecret.substring(0, 3) + '...[snip]...' + apiSecret.substring(apiSecret.length - 3);
+    console.log(redactedApiSecret);
     return false;
   }