https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20638 --- Comment #63 from Emmi Takkinen <emmi.takkinen@koha-suomi.fi> --- (In reply to Lisette Scheer from comment #62)
(In reply to Emmi Takkinen from comment #58)
We just tested this and noticed that now API secret and client_id are displayed on patrons modification log. Currently secret is not displayed on Koha and is only viewable from database. Not saying this is a blocker but we were just thinking can this cause security issues?
Hi Emmi,
The secret field shown is an encrypted version, not the actual secret, to confirm you can create an api in one tab, then run logs in a different one and you'll see that it is not the same in the logs as was just created.
Thanks for the clarification! :) -- You are receiving this mail because: You are watching all bug changes.