From fb811e10ba7153daa50fdea9aeba271c885c9476 Mon Sep 17 00:00:00 2001
From: Craig Raw <craigraw@gmail.com>
Date: Thu, 20 Aug 2026 13:56:59 +0200
Subject: [PATCH] redact the core credentials from the bwt debug log

---
 lark                                                 | 2 +-
 src/main/java/com/sparrowwallet/sparrow/net/Bwt.java | 9 ++++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/lark b/lark
index ddffe556..d4fdf4da 160000
--- a/lark
+++ b/lark
@@ -1 +1 @@
-Subproject commit ddffe556f0d1ba6a138be3b362ce74219fed0710
+Subproject commit d4fdf4dac185cef22b4446ab33734f9fab99fdf2
diff --git a/src/main/java/com/sparrowwallet/sparrow/net/Bwt.java b/src/main/java/com/sparrowwallet/sparrow/net/Bwt.java
index 62863c9c..a5a5096a 100644
--- a/src/main/java/com/sparrowwallet/sparrow/net/Bwt.java
+++ b/src/main/java/com/sparrowwallet/sparrow/net/Bwt.java
@@ -2,6 +2,7 @@ package com.sparrowwallet.sparrow.net;
 
 import com.google.common.net.HostAndPort;
 import com.google.gson.Gson;
+import com.google.gson.JsonObject;
 import com.google.gson.annotations.SerializedName;
 import com.sparrowwallet.drongo.KeyPurpose;
 import com.sparrowwallet.drongo.Network;
@@ -204,7 +205,13 @@ public class Bwt {
 
         Gson gson = new Gson();
         String jsonConfig = gson.toJson(bwtConfig);
-        log.debug("Configuring bwt: " + jsonConfig);
+        if(log.isDebugEnabled()) {
+            JsonObject loggedConfig = gson.toJsonTree(bwtConfig).getAsJsonObject();
+            if(loggedConfig.has("bitcoind_auth")) {
+                loggedConfig.addProperty("bitcoind_auth", "*****");
+            }
+            log.debug("Configuring bwt: " + loggedConfig);
+        }
 
         NativeBwtDaemon.start(jsonConfig, callback);
     }