rsp2k/headscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

types: omit secret fields from JSON marshalling

Browse source 
Add json:"-" to PostgresConfig.Pass, OIDCConfig.ClientSecret, and
CLIConfig.APIKey so they are excluded from json.Marshal output
(e.g. the /debug/config endpoint).
This commit is contained in:
Kristoffer Dalby 2026-04-09 17:54:46 +00:00
parent 0641771128
commit a3c4ad2ca3
2 changed files with 41 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
hscontrol/types/config.go
View file

@ -148,7 +148,7 @@ type PostgresConfig struct {
Port int
Name string
User string
Pass string
Pass string `json:"-"` // never serialise the database password
Ssl string
MaxOpenConnections int
MaxIdleConnections int
@ -198,7 +198,7 @@ type OIDCConfig struct {
OnlyStartIfOIDCIsAvailable bool
Issuer string
ClientID string
ClientSecret string
ClientSecret string `json:"-"` // never serialise the OIDC client secret
Scope []string
ExtraParams map[string]string
AllowedDomains []string
@ -237,7 +237,7 @@ type TaildropConfig struct {
type CLIConfig struct {
Address string
APIKey string
APIKey string `json:"-"` // never serialise the headscale admin API key
Timeout time.Duration
Insecure bool
}