fix(proxy): hide WIF secret references from /health output

This commit is contained in:
mateo-berri 2026-09-05 15:00:22 -07:00
parent b414494fc8
commit 2a4cf5a78d
2 changed files with 6 additions and 0 deletions

View file

@ -47,6 +47,9 @@ ILLEGAL_DISPLAY_PARAMS: Final = [
"aws_secret_access_key",
"aws_session_token",
"aws_web_identity_token",
"anthropic_identity_token",
"anthropic_issuer_signing_key_ref",
"anthropic_keycloak_client_secret_ref",
"extra_headers",
"headers",
"exception", # internal; not JSON-serializable, never for display

View file

@ -2553,6 +2553,9 @@ def test_clean_endpoint_data_strips_extra_headers_and_aws_session_token():
"aws_secret_access_key",
"aws_session_token",
"aws_web_identity_token",
"anthropic_identity_token",
"anthropic_issuer_signing_key_ref",
"anthropic_keycloak_client_secret_ref",
"vertex_credentials",
"vertex_ai_credentials",
"extra_headers",