You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
When an error occurs during processing the login token response, the whole token object is logged. This may lead to a consumer accidentally logging user credentials and storing in centralised logging.
`Gotrue-js: Failed to parse tokenResponse claims: ${JSON.stringify(tokenResponse)}`,
Specifically I ran into this while trying to use the library in a Node app (which the library doesn't support currently), but any internal error will trigger this.
To Reproduce
This node script will show the logging. Note that this is using node-fetch so as to be able to run the fetch and get to the decoding.
Describe the bug
When an error occurs during processing the login token response, the whole token object is logged. This may lead to a consumer accidentally logging user credentials and storing in centralised logging.
gotrue-js/src/user.js
Line 161 in cc2dc5e
Specifically I ran into this while trying to use the library in a Node app (which the library doesn't support currently), but any internal error will trigger this.
To Reproduce
This node script will show the logging. Note that this is using node-fetch so as to be able to run the fetch and get to the decoding.
Alternatively this could also be triggered on the browser side from a malformed set of returned token claims.
Expected behavior
There should be a meaningful message, but no logging of the token itself.
The text was updated successfully, but these errors were encountered: