Clarify that creds doesn not contain passwords.

This commit is contained in:
David Baker 2016-11-24 10:54:59 +00:00
parent f681aab895
commit c9d4e7b716

View File

@ -164,7 +164,9 @@ class AuthHandler(BaseHandler):
if len(set(f) - set(creds.keys())) == 0: if len(set(f) - set(creds.keys())) == 0:
# it's very useful to know what args are stored, but this can # it's very useful to know what args are stored, but this can
# include the password in the case of registering, so only log # include the password in the case of registering, so only log
# the keys. # the keys (confusingly, clientdict may contain a password
# param, creds is just what the user authed as for UI auth
# and is not sensitive).
logger.info( logger.info(
"Auth completed with creds: %r. Client dict has keys: %r", "Auth completed with creds: %r. Client dict has keys: %r",
creds, clientdict.keys() creds, clientdict.keys()