oscerd opened a new pull request, #26196:
URL: https://github.com/apache/camel/pull/26196
## Backport of #26185
Cherry-pick of #26185 onto `camel-4.22.x`.
**Original PR:** #26185 - CAMEL-24425: camel-azure-storage-blob - mark
sasToken as a secret
**Original author:** @oscerd
**Target branch:** `camel-4.22.x`
Straight cherry-pick — applied with no conflicts and no code changes. Full
reactor sanity build on the
target branch is clean, and the regenerated catalog, DSL mirrors and
`SensitiveUtils` keyword list
match what the annotation produces on this branch.
### Original description
`BlobConfiguration.sasToken` carried a bare `@UriParam`. A SAS token embeds
the signature that grants
access for its validity window, so it is a credential and belongs with
`accessKey` and
`sourceBlobAccessKey`, which the same class already marks.
Because the option was unmarked, `sastoken` was missing from the generated
`SensitiveUtils` keyword
list, so `SensitiveUtils.containsSensitive("sasToken")` returned `false` and
the value was printed in
clear by every masking layer that consults it — the properties and
main-configuration dev consoles,
`camel-jbang` props, the jbang MCP secret redactor and the
`camel-kubernetes` properties function.
---
_Claude Code on behalf of oscerd_
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
