Mask DB password in logs (#1072)

api/common/logging.go

@@ -6,6 +6,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 	"github.com/sirupsen/logrus"
+	"strings"
 )
 
 func SetLogLevel(ll string) {
@@ -80,3 +81,14 @@ func SetLogDest(to, prefix string) {
 		logrus.WithFields(logrus.Fields{"scheme": parsed.Scheme, "to": to}).Error("unknown logging location scheme, defaulting to stderr")
 	}
 }
+
+// MaskPassword returns a stringified URL without its password visible
+func MaskPassword(u *url.URL) string {
+	if u.User != nil {
+		p, set := u.User.Password()
+		if set {
+			return strings.Replace(u.String(), p+"@", "***@", 1)
+		}
+	}
+	return u.String()
+}