diff --git a/CHANGELOG.md b/CHANGELOG.md index 57c9904..978887c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,11 @@ # Unreleased # Released +# v1.3.1 + +## Security Fixes +* Fixed security and quality issues at clear-text URL logging in HTTP transport retry/exception paths and `examples/oauth_client.py` [#193](https://github.com/hashicorp/python-tfe/pull/193) + # v1.3.0 ## Enhancements diff --git a/src/pytfe/_http.py b/src/pytfe/_http.py index 0bfa105..ce891be 100644 --- a/src/pytfe/_http.py +++ b/src/pytfe/_http.py @@ -102,9 +102,8 @@ def request( ) except httpx.HTTPError as e: transport_logger.debug( - "transport exception on %s %s (attempt %d): %s", + "transport exception on %s (attempt %d): %s", method, - "", attempt, e, ) @@ -123,9 +122,8 @@ def request( if resp.status_code in _RETRY_STATUSES and attempt < self.max_retries: retry_after = _parse_retry_after(resp) transport_logger.info( - "retrying %s %s after %s (status=%d, attempt=%d)", + "retrying %s after %s (status=%d, attempt=%d)", method, - "", f"{retry_after:.2f}s" if retry_after else "backoff", resp.status_code, attempt,