From 669a1498aaec3abdfd8ced053857eb52cdf99eca Mon Sep 17 00:00:00 2001
From: Girish Ramakrishnan <girish@cloudron.io>
Date: Sun, 17 Jun 2018 15:01:42 -0700
Subject: [PATCH] Do not dump token in logs

---
 src/routes/oauth2.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/routes/oauth2.js b/src/routes/oauth2.js
index a546728ad..9faf5dc53 100644
--- a/src/routes/oauth2.js
+++ b/src/routes/oauth2.js
@@ -102,7 +102,7 @@ function initialize() {
                 tokendb.add(token, authCode.userId, authCode.clientId, expires, scope, function (error) {
                     if (error) return callback(error);
 
-                    debug('exchange: new access token for client %s token %s', client.id, token);
+                    debug('exchange: new access token for client %s token %s', client.id, token.slice(0, 6)); // partial token for security
 
                     callback(null, token);
                 });