Take session lookup off System.out, and its *** id with it

ChoreSecurityService
Shipped
August 23, 2026 at 6:21 AM UTC
Author
Kamo
Commit
cda6d04

After the previous commit removed the Hibernate session-metrics blocks and MemberController's per-request tracing, this was 88% of what remained: every session lookup printed about seventeen lines — a START banner, the *** id, its length, the payload size, an END banner — and there were 72 lookups in a five-minute idle window. println has no level, so none of it was switchable. It also wrote the first 64 characters of the session identifier on every lookup. That is credential material, and a pod log is read by far more people and tooling than the session store is. At DEBUG it is off unless somebody deliberately asks for it. All 92 are now slf4j: the invalid-input paths keep their visibility at warn, one failure at error, the rest debug.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing