From 4b36667ba1a257c35c16ee9d2b73bcf003434261 Mon Sep 17 00:00:00 2001
From: Henry Guo <marshawcoco@gmail.com>
Date: Wed, 6 May 2026 20:56:27 +0800
Subject: [PATCH] fix(policy): avoid logging generated access keys (#2826)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: houseme <housemecn@gmail.com>
Co-authored-by: houseme <housemecn@gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: loverustfs <hello@rustfs.com>
Co-authored-by: 安正超 <anzhengchao@gmail.com>
---
 crates/policy/src/auth/credentials.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/crates/policy/src/auth/credentials.rs b/crates/policy/src/auth/credentials.rs
index 4801a04b5..7772a09e5 100644
--- a/crates/policy/src/auth/credentials.rs
+++ b/crates/policy/src/auth/credentials.rs
@@ -21,7 +21,7 @@ use serde_json::{Value, json};
 use std::collections::HashMap;
 use std::convert::TryFrom;
 use time::OffsetDateTime;
-use tracing::warn;
+use tracing::debug;
 
 const ACCESS_KEY_MIN_LEN: usize = 3;
 const ACCESS_KEY_MAX_LEN: usize = 128;
@@ -144,7 +144,7 @@ pub fn create_new_credentials_with_metadata(
         }
     };
 
-    warn!("create_new_credentials_with_metadata expiration {expiration:?}, access_key: {ak}");
+    debug!("create_new_credentials_with_metadata expiration {expiration:?}");
 
     let token = utils::generate_jwt(&claims, token_secret)?;