Merge pull request #485 from rjbs/remove-crypt-pw-log

pause_2017: remove logging of crypt pw on failed login
andk · Apr 28, 2024 · de917d6 · de917d6
2 parents a13591c + 6b6e41e
commit de917d6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/pause_2017/PAUSE/Web/Middleware/Auth/Basic.pm b/lib/pause_2017/PAUSE/Web/Middleware/Auth/Basic.pm
@@ -178,8 +178,8 @@ sub authenticate {
       $dbh->disconnect;
       return HTTP_OK;
     } else {
-      warn sprintf "crypt_pw[%s]user[%s]uri[%s]auth_required[%d]",
-          $crypt_pw, $user_record->{user}, $req->path, HTTP_UNAUTHORIZED;
+      warn sprintf "failed login: user[%s]uri[%s]auth_required[%d]",
+          $user_record->{user}, $req->path, HTTP_UNAUTHORIZED;
     }
   }