pgsodium icon indicating copy to clipboard operation
pgsodium copied to clipboard

Avoid secret logging

Open yhuelf opened this issue 3 years ago • 1 comments

Hello

Re https://github.com/michelp/pgsodium#avoid-secret-logging

Setting log_statement to 'none' isn't enough to avoid secret logging.

If, say, log_min_duration_statement is set to 0, the secret will be logged anyway.

I don't know if there's a simple way to avoid completely secret logging (besides log_min_duration_statement, logging could be handled by an ad hoc extension).

yhuelf avatar Nov 24 '22 13:11 yhuelf

Good point, if you'd like to submit a PR mentioning that issue I'll merge it. We use the pgaudit extension at supabase, so might be worth mentioning it as well and any others you may know of. Thanks!

michelp avatar Nov 30 '22 23:11 michelp