(r *v1pb.SignupRequest)
| 584 | } |
| 585 | |
| 586 | func redactSignupRequest(r *v1pb.SignupRequest) *v1pb.SignupRequest { |
| 587 | if r == nil { |
| 588 | return nil |
| 589 | } |
| 590 | r = proto.CloneOf(r) |
| 591 | if r.Password != "" { |
| 592 | r.Password = maskedString |
| 593 | } |
| 594 | return r |
| 595 | } |
| 596 | |
| 597 | // redactExchangeTokenRequest masks the external OIDC JWT. The token is a |
| 598 | // credential — it could be replayed against the original IdP or, if logged, |