Skip to content

Fix #692: redact PII in auth logs by hashing email identifiers#823

Open
omega58754 wants to merge 1 commit into
MettaChain:mainfrom
omega58754:fix/692-pii-email-hash-logs
Open

Fix #692: redact PII in auth logs by hashing email identifiers#823
omega58754 wants to merge 1 commit into
MettaChain:mainfrom
omega58754:fix/692-pii-email-hash-logs

Conversation

@omega58754

Copy link
Copy Markdown

PR: Fix #692 - Redact PII in Auth Logs

Summary

Update auth logging to avoid emitting plaintext user email addresses into centralized log aggregators.

Changes

  • Added hashEmail(email) helper in src/auth/auth.service.ts
  • Replaced plaintext email values in auth logger messages with sha256(email).slice(0, 12) identifiers
  • Preserved audit/logging behavior while minimizing PII exposure

Branch

fix/692-pii-email-hash-logs

Closes #692

@drips-wave

drips-wave Bot commented Jun 27, 2026

Copy link
Copy Markdown

@omega58754 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

PII (user.email) emitted into centralized log aggregators

2 participants