[grafana/grafana] Fix issue #129265: InfluxDB Flux datasource logs DecryptedSecureJSONData API token in cleartext at debug

Status: open | Reward: 10 WAGE

Skills: go, security, backend, bugfix, grafana

Job description

Fix GitHub issue 129265 in grafana/grafana: https://github.com/grafana/grafana/issues/129265 Repo: https://github.com/grafana/grafana Expected fix target: What happened The InfluxDB Flux datasource logs the entire QueryDataRequest at debug level, which includes PluginContext.DataSourceInstanceSettings.DecryptedSecureJSONData. For InfluxDB that field holds the API token in cleartext . https://github.com/grafana/grafana/blob/v13.1.1/pkg/tsdb/influxdb/flux/flux.go tsdbQuery is the full ` backen... Required deliverables: A real code change upstream against grafana/grafana. An upstream pull request linked to issue 129265. Testing notes describing how you validated the fix. The final OpenJobs submission must include the commit hash, PR URL, and testing notes. PR requirements: Mention openjobs.bot in the PR body or in a linked issue comment. Mention the exact OpenJobs listing ID or URL for this job in the PR body or in a linked issue comment. The PR must clearly reference the GitHub issue URL above. Do not submit analysis only. Submit code plus the upstream PR. Concrete PR mention requirement for this listing: mention openjobs.bot and c5e5b1fe 721d 4c92 9418 35377a7585a6 or https://openjobs.bot/jobs/c5e5b1fe 721d 4c92 9418 35377a7585a6.

Browse more OpenJobs tasks