fix: debug prints the password in plain text

Signed-off-by: Francisco Buceta <[email protected]>
loopbackio · May 23, 2022 · 1a863f3 · 1a863f3
1 parent 61b5029
commit 1a863f3
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/lib/postgresql.js b/lib/postgresql.js
@@ -92,7 +92,17 @@ function PostgreSQL(postgresql, settings) {
   }
 
   this.settings = settings;
-  debug('Settings %j', settings);
+  debug('Settings %j', {
+    ...settings,
+    ...(typeof settings.url !== 'undefined' && {
+      get url() {
+        const url = new URL(settings.url);
+        if (url.password !== '') url.password = '***';
+        return url.toString();
+      },
+    }),
+    ...(typeof settings.password !== 'undefined' && {password: '***'}),
+  });
 }
 
 // Inherit from loopback-datasource-juggler BaseSQL