Don't log the token during re-auth

CVE-2023-46175
ManageIQ · Nov 17, 2023 · 86cd1eb · 86cd1eb
1 parent ea5df1f
commit 86cd1eb
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/app/models/manageiq/providers/autosde/storage_manager/autosde_client.rb b/app/models/manageiq/providers/autosde/storage_manager/autosde_client.rb
@@ -48,13 +48,11 @@ def call_api(http_method, path, opts = {})
     case e.code
     when AUTH_TOKEN_INVALID
       begin
-        _log.warn("doing re-login: token is #{@token}")
         login
         set_auth_token
         super
       rescue
         # in case re-login did not help, throw error
-        _log.error("re-login was unsuccessful: token is #{@token}")
         raise # throw the last error
       end
     else