Toby1009 opened a new issue, #25632: URL: https://github.com/apache/datafusion/issues/25632
### Is your feature request related to a problem or challenge? Object-store URLs may contain credentials in their userinfo component. These can appear in `ObjectStoreUrl` debug output and object-store registry error messages. When applications log or share these diagnostics for troubleshooting, credentials embedded in the URL may unintentionally be included. ### Describe the solution you'd like Redact credential userinfo in diagnostic output while preserving useful information such as the scheme, host, and port. Preserve existing URL parsing, object-store resolution, and protobuf round-trip behavior. Account for scheme-specific uses of userinfo: for example, ABFS/ABFSS uses the username component to identify the container. ### Describe alternatives you've considered Rejecting all URLs containing userinfo would affect existing supported inputs, including ABFS/ABFSS URLs. Changing `Display` to redact credentials would also affect callers that use it for serialization. Keeping diagnostic formatting separate would avoid changing that behavior. ### Additional context This proposal focuses on debug output and registry error messages. It does not propose changing the serialized URL representation. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
