Merge pull request #505 from anoadragon453/anoa/dont_log_bbb_secret

Stop logging BigBlueButton shared secrets
This commit is contained in:
Travis Ralston 2023-01-30 10:39:21 -07:00 committed by GitHub
commit b98b2848cf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -362,9 +362,6 @@ export class DimensionBigBlueButtonService {
// We URL encode each value as a browser would. If we don't, our resulting checksum will not match.
const widgetQueryString = this.queryStringFromObject(queryParameters, encodeAsBrowser);
LogService.info("BigBlueButton", "Built widget string:" + widgetQueryString);
LogService.info("BigBlueButton", "Hashing:" + apiCallName + widgetQueryString + config.bigbluebutton.sharedSecret);
// Hash the api name and query parameters to get the checksum, and add it to the set of query parameters
return sha256(apiCallName + widgetQueryString + config.bigbluebutton.sharedSecret);
}