Skip to content

fix: stop logging WhatsApp credential material#128

Merged
buremba merged 1 commit into
mainfrom
codex/issue-119-whatsapp-credential-logs
Feb 28, 2026
Merged

fix: stop logging WhatsApp credential material#128
buremba merged 1 commit into
mainfrom
codex/issue-119-whatsapp-credential-logs

Conversation

@buremba
Copy link
Copy Markdown
Member

@buremba buremba commented Feb 28, 2026

Summary

  • remove runtime log output that printed full WHATSAPP_CREDENTIALS values from WhatsApp auth state handling
  • keep observability by logging a non-sensitive serializedLength metadata field when credentials rotate
  • update the Baileys credential-update callsite to pass only sanitized metadata to logging helper

Validation

  • bun run check
  • make build-packages
  • ./scripts/test-bot.sh "@me issue 119 logging check" (fails in this environment: no platform configured / WhatsApp not enabled in running stack)

Fixes #119

@buremba buremba merged commit 68968b5 into main Feb 28, 2026
12 of 13 checks passed
This was referenced Feb 28, 2026
@buremba buremba deleted the codex/issue-119-whatsapp-credential-logs branch April 21, 2026 21:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

WhatsApp Signal credentials logged to stdout

1 participant