fix: Remove secret and signature from the log (#1466)

2026-08-12 16:16:55 +00:00 · 2026-01-11 17:45:16 +08:00
parent ddaa9e35ea
commit 6b2eebee1d
3 changed files with 75 additions and 12 deletions
@@ -108,14 +108,19 @@ pub fn verify_rpc_signature(url: &str, method: &Method, headers: &HeaderMap) ->
    }

    // Generate expected signature
-
    let expected_signature = generate_signature(&secret, url, method, timestamp);

    // Compare signatures
    if signature != expected_signature {
        error!(
-            "verify_rpc_signature: Invalid signature: secret {}, url {}, method {}, timestamp {}, signature {}, expected_signature {}",
-            secret, url, method, timestamp, signature, expected_signature
+            "verify_rpc_signature: Invalid signature: url {}, method {}, timestamp {}, signature {}, expected_signature: {}***{}|{}",
+            url,
+            method,
+            timestamp,
+            signature,
+            expected_signature.chars().next().unwrap_or('*'),
+            expected_signature.chars().last().unwrap_or('*'),
+            expected_signature.len()
        );

        return Err(std::io::Error::other("Invalid signature"));