From dde613bbe8a4bb55dc5966df4ac6714316108e35 Mon Sep 17 00:00:00 2001
From: Alexander Zobnin <alexanderzobnin@gmail.com>
Date: Tue, 6 May 2025 18:54:48 +0200
Subject: [PATCH] Settings: Exclude zanzana client token value from output
 (#105018)

* Settings: Exclude zanzana client token value from output

* add test

* fix tests
---
 pkg/setting/setting.go      | 1 +
 pkg/setting/setting_test.go | 6 ++++++
 2 files changed, 7 insertions(+)

diff --git a/pkg/setting/setting.go b/pkg/setting/setting.go
index db397c3ddb9..f599d3f02e6 100644
--- a/pkg/setting/setting.go
+++ b/pkg/setting/setting.go
@@ -633,6 +633,7 @@ func RedactedValue(key, value string) string {
 		"CLIENT_SECRET",
 		"ENTERPRISE_LICENSE",
 		"API_DB_PASS",
+		"^TOKEN$",
 		"ID_FORWARDING_TOKEN$",
 		"AUTHENTICATION_TOKEN$",
 		"AUTH_TOKEN$",
diff --git a/pkg/setting/setting_test.go b/pkg/setting/setting_test.go
index 0077bf27ef4..9a434a7e2ff 100644
--- a/pkg/setting/setting_test.go
+++ b/pkg/setting/setting_test.go
@@ -523,6 +523,12 @@ func TestRedactedValue(t *testing.T) {
 			value:    "test",
 			expected: RedactedPassword,
 		},
+		{
+			desc:     "client token",
+			key:      "token",
+			value:    "test",
+			expected: RedactedPassword,
+		},
 	}
 
 	for _, tc := range testCases {