mirror of
https://github.com/greenart7c3/Amber.git
synced 2026-10-06 03:18:23 +00:00
Claude
d03dfd8236
EventNotificationConsumer persisted the decrypted bunker request
("Decrypted request: $requestStr") to the log DB, and
BunkerRequestUtils logged the full bunker response — whose result is
the plaintext for a decrypt operation. Both left cleartext at rest in
log_db_$npub (the encrypted event itself is already logged separately).
Log only non-sensitive metadata instead: the request id + method, and
the response id + error status. The encrypted event remains logged, so
diagnostics are preserved without storing plaintext.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WABMihCLr9XN51uLWj93oX