From f7ac1192ae16520b69c15a0a9b74923294ad5dee Mon Sep 17 00:00:00 2001 From: Charles Liu Date: Tue, 2 Sep 2025 03:19:20 +0200 Subject: [PATCH] replace the secret field from obfuscated to full-masked value (#24800) Co-authored-by: charles liu Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com> --- api/core/helper/encrypter.py | 4 ++++ api/fields/workflow_fields.py | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/api/core/helper/encrypter.py b/api/core/helper/encrypter.py index 383a2dd57e..fc54a17f50 100644 --- a/api/core/helper/encrypter.py +++ b/api/core/helper/encrypter.py @@ -11,6 +11,10 @@ def obfuscated_token(token: str) -> str: return token[:6] + "*" * 12 + token[-2:] +def full_mask_token(token_length=20): + return "*" * token_length + + def encrypt_token(tenant_id: str, token: str): from models.account import Tenant from models.engine import db diff --git a/api/fields/workflow_fields.py b/api/fields/workflow_fields.py index f048d0f3b6..53cb9de3ee 100644 --- a/api/fields/workflow_fields.py +++ b/api/fields/workflow_fields.py @@ -17,7 +17,7 @@ class EnvironmentVariableField(fields.Raw): return { "id": value.id, "name": value.name, - "value": encrypter.obfuscated_token(value.value), + "value": encrypter.full_mask_token(), "value_type": value.value_type.value, "description": value.description, }