[
https://issues.apache.org/jira/browse/KARAF-7537?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jean-Baptiste Onofré updated KARAF-7537:
----------------------------------------
Fix Version/s: 4.3.8
4.4.2
> Password displayed in console using repo-list
> ---------------------------------------------
>
> Key: KARAF-7537
> URL: https://issues.apache.org/jira/browse/KARAF-7537
> Project: Karaf
> Issue Type: Wish
> Affects Versions: 4.3.7
> Reporter: Colm O hEigeartaigh
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Fix For: 4.3.8, 4.4.2
>
>
> If you add a feature repository with a user credential, e.g.:
> {code:java}
> repo-add
> mvn:https://user:[email protected]/maven2!org.apache.cxf.karaf/apache-cxf/3.5.3/xml/features
> {code}
> Then Karaf displays the password in full in the console with:
> {code:java}
> repo-list | grep password
> cxf-3.5.3 │
> mvn:https://user:[email protected]/maven2!org.apache.cxf.karaf/apache-cxf/3.5.3/xml/features
> {code}
> For repos that contain a password, it would be more secure if the password
> was redacted for logging/display purposes.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
