markhoerth commented on issue #12728:
URL: https://github.com/apache/gravitino/issues/12728#issuecomment-5531267707

   @jerryshao All error responses, not just the unauthorized ones. The stack is 
present on every error path in the 130-endpoint sweep, and internal class 
names, line numbers and the proxy chain are not something an authenticated 
caller is entitled to either. Default is omitted; an explicit server setting 
turns it back on for debugging.
   
   Two conditions on the fix:
   
   * When the stack is omitted from the response it must be logged server-side 
at the point the exception is mapped. Today some paths log nothing, which makes 
the response body the only copy.
   * The log line and the response carry a shared request id so a user report 
can be tied to the server log entry.
   
   The code, type and message fields stay as they are.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to