[JAVA-4195] Handshake command with speculativeAuthenticate is unredacted Created: 14/Jun/21  Updated: 28/Oct/23  Resolved: 01/Jul/21

Status: Closed
Project: Java Driver
Component/s: Logging, Monitoring
Affects Version/s: None
Fix Version/s: 4.3.0

Type: Bug Priority: Minor - P4
Reporter: Jeffrey Yemin Assignee: Jeffrey Yemin
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
related to JAVA-4164 Add test for security-sensitive comma... Closed
Backwards Compatibility: Minor Change
Documentation Changes: Not Needed

 Description   

The driver fails the redaction test of isMaster/hello with speculativeAuthenticate. However, the Java driver doesn't generate events for commands executed as part of the connection handshake, so in practice I wouldn't expect actual applications to encounter it (speculativeAuthenticate is not even documented in the MongoDB manual).

When this bug is fixed, the "hello with speculative authenticate" unified command monitoring test should be un-skipped in the test runner.

In addition, we should ensure that logging of commands that should be redacted are also redacted.  Currently they are not.  



 Comments   
Comment by Githook User [ 01/Jul/21 ]

Author:

{'name': 'Jeff Yemin', 'email': 'jeff.yemin@mongodb.com', 'username': 'jyemin'}

Message: Ensure redacted commands are logged with elision

JAVA-4195
Branch: master
https://github.com/mongodb/mongo-java-driver/commit/f253f90ba60eddcf10afd35b4c8a6654fc89cff7

Comment by Githook User [ 01/Jul/21 ]

Author:

{'name': 'Jeff Yemin', 'email': 'jeff.yemin@mongodb.com', 'username': 'jyemin'}

Message: Ensure command event for hello with speculativeAuthenticate is elided

JAVA-4195
Branch: master
https://github.com/mongodb/mongo-java-driver/commit/d7b19c8c711dbd859f45721d549331781b649299

Generated at Thu Feb 08 09:01:28 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.