P4ADEV-1781 remove log of decrypted api-key

pagopa · Dec 20, 2024 · dd6d124 · dd6d124
1 parent 038ce88
commit dd6d124
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/src/main/java/it/gov/pagopa/pu/organization/service/broker/BrokerEncryptionService.java b/src/main/java/it/gov/pagopa/pu/organization/service/broker/BrokerEncryptionService.java
@@ -4,7 +4,6 @@
 import it.gov.pagopa.pu.organization.model.Broker;
 import it.gov.pagopa.pu.organization.util.AESUtils;
 import lombok.extern.slf4j.Slf4j;
-import org.apache.commons.lang3.StringUtils;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Service;
 
@@ -37,11 +36,9 @@ private String decryptKey(byte[] encryptedKey, String type, Long brokerId){
       log.debug("null or empty api-key");
       return null;
     }
-    String decrypted = apiKeyDecryptMap.computeIfAbsent(encryptedKey, c -> {
-      log.debug("invoking AESUtils to decrypt api-key");
+    return apiKeyDecryptMap.computeIfAbsent(encryptedKey, c -> {
+      log.debug("invoking AESUtils to decrypt api-key[{}] for broker[{}]", type, brokerId);
       return AESUtils.decrypt(brokerEncryptPassword,c);
     });
-    log.debug("decrypted api-key[{}] for broker[{}]: {}", type, brokerId, StringUtils.abbreviateMiddle(decrypted, "..", 8));
-    return decrypted;
   }
 }