Redact token from logger output

code-asher · code-asher · commit b5ef3dfee38c · 2023-04-03T08:35:29.000-08:00
diff --git a/src/main/kotlin/com/coder/gateway/sdk/CoderCLIManager.kt b/src/main/kotlin/com/coder/gateway/sdk/CoderCLIManager.kt
@@ -149,13 +149,16 @@ class CoderCLIManager(deployment: URL, buildVersion: String) {
             .readOutput(true)
             .execute()
             .outputUTF8()
-        logger.info("`${localBinaryPath} ${listOf(*args).joinToString(" ")}`: $stdout")
+        val redactedArgs = listOf(*args).joinToString(" ").replace(tokenRegex, "--token <redacted>")
+        logger.info("`$localBinaryPath $redactedArgs`: $stdout")
         return stdout
     }
 
     companion object {
         val logger = Logger.getInstance(CoderCLIManager::class.java.simpleName)
 
+        private val tokenRegex = "--token [^ ]+".toRegex()
+
         /**
          * Return the URL and token from the CLI config.
          */
