redactExchangeTokenResponse drops the issued Bytebase access token. Logging it would give anyone with audit-log read access a valid API token for the workload identity. Returns an empty response so the audit entry still records that the call happened.
(r *v1pb.ExchangeTokenResponse)
| 614 | // workload identity. Returns an empty response so the audit entry still |
| 615 | // records that the call happened. |
| 616 | func redactExchangeTokenResponse(r *v1pb.ExchangeTokenResponse) *v1pb.ExchangeTokenResponse { |
| 617 | if r == nil { |
| 618 | return nil |
| 619 | } |
| 620 | return &v1pb.ExchangeTokenResponse{} |
| 621 | } |
| 622 | |
| 623 | func redactCreateUserRequest(r *v1pb.CreateUserRequest) *v1pb.CreateUserRequest { |
| 624 | if r == nil { |