KamoCRM

Take session lookup off System.out, and its *** id with it

ChoreSecurityService
Ya
23 Agosti 2026, 06:21 UTC
Mwandishi
Kamo
Ahadi ya
cda6d04

After the previous commit removed the Hibernate session-metrics blocks and MemberController's per-request tracing, this was 88% of what remained: every session lookup printed about seventeen lines — a START banner, the *** id, its length, the payload size, an END banner — and there were 72 lookups in a five-minute idle window. println has no level, so none of it was switchable. It also wrote the first 64 characters of the session identifier on every lookup. That is credential material, and a pod log is read by far more people and tooling than the session store is. At DEBUG it is off unless somebody deliberately asks for it. All 92 are now slf4j: the invalid-input paths keep their visibility at warn, one failure at error, the rest debug.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila kitu kinaingia kwenye tovuti yako mwenyewe. Anza kwenye mpango wa bure na usome ukurasa huu tena katika mwezi mmoja.

Kuwa Huru MileleMtazamo wa bei