From 93815b50aad65ef7cf3d7331f2f4db443be28844 Mon Sep 17 00:00:00 2001 From: Srdjan Grubor Date: Thu, 14 Feb 2019 16:18:34 -0600 Subject: [PATCH] Remove IAM response logging We don't want to log potentially-sensitive information in the authentication responses from IAM (eg. token). --- app/domain/authentication/authn_iam/authenticator.rb | 1 - 1 file changed, 1 deletion(-) diff --git a/app/domain/authentication/authn_iam/authenticator.rb b/app/domain/authentication/authn_iam/authenticator.rb index 853cc7c444..6ef2c61596 100755 --- a/app/domain/authentication/authn_iam/authenticator.rb +++ b/app/domain/authentication/authn_iam/authenticator.rb @@ -53,7 +53,6 @@ def aws_signed_url def response_from_signed_request(aws_headers) Rails.logger.debug("Retrieving IAM identity") - RestClient.log = Rails.logger begin RestClient.get(aws_signed_url, headers = aws_headers) rescue RestClient::ExceptionWithResponse => e