From 1ade3ec4515bf1e10bd234f312fee7265e6650dd Mon Sep 17 00:00:00 2001 From: Samir Ladoui Date: Tue, 16 Sep 2025 10:59:41 +0100 Subject: [PATCH] [UPD] odex_mobile --- odex25_mobile/odex_mobile/models/res_users.py | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/odex25_mobile/odex_mobile/models/res_users.py b/odex25_mobile/odex_mobile/models/res_users.py index ad63826d7..7fd3e7239 100644 --- a/odex25_mobile/odex_mobile/models/res_users.py +++ b/odex25_mobile/odex_mobile/models/res_users.py @@ -105,6 +105,24 @@ class Users(models.Model): @api.model def create(self, vals): + # logging vals (mask sensitive keys) + if isinstance(vals, dict): + safe_vals = dict(vals) + elif isinstance(vals, (list, tuple)): + first = vals[0] if vals else {} + try: + safe_vals = dict(first) + except Exception: + safe_vals = {} + else: + try: + safe_vals = dict(vals) + except Exception: + safe_vals = {} + for key in list(safe_vals.keys()): + if 'pass' in key.lower() or 'token' in key.lower(): + safe_vals[key] = '***' + _logger.info("\n\n\n[odex_mobile] Creating user with login: %s\n\n\n", safe_vals.get('login', 'Login value not found')) res = super(Users, self).create(vals) if 'password' in vals or vals.get('active') is False: self._invalidate_tokens(res)