Is your feature request related to a problem or challenge?
Object-store URLs may contain credentials in their userinfo component. These can appear in ObjectStoreUrl debug output and object-store registry error messages.
When applications log or share these diagnostics for troubleshooting, credentials embedded in the URL may unintentionally be included.
Describe the solution you'd like
Redact credential userinfo in diagnostic output while preserving useful information such as the scheme, host, and port.
Preserve existing URL parsing, object-store resolution, and protobuf round-trip behavior. Account for scheme-specific uses of userinfo: for example, ABFS/ABFSS uses the username component to identify the container.
Describe alternatives you've considered
Rejecting all URLs containing userinfo would affect existing supported inputs, including ABFS/ABFSS URLs.
Changing Display to redact credentials would also affect callers that use it for serialization. Keeping diagnostic formatting separate would avoid changing that behavior.
Additional context
This proposal focuses on debug output and registry error messages. It does not propose changing the serialized URL representation.
Is your feature request related to a problem or challenge?
Object-store URLs may contain credentials in their userinfo component. These can appear in
ObjectStoreUrldebug output and object-store registry error messages.When applications log or share these diagnostics for troubleshooting, credentials embedded in the URL may unintentionally be included.
Describe the solution you'd like
Redact credential userinfo in diagnostic output while preserving useful information such as the scheme, host, and port.
Preserve existing URL parsing, object-store resolution, and protobuf round-trip behavior. Account for scheme-specific uses of userinfo: for example, ABFS/ABFSS uses the username component to identify the container.
Describe alternatives you've considered
Rejecting all URLs containing userinfo would affect existing supported inputs, including ABFS/ABFSS URLs.
Changing
Displayto redact credentials would also affect callers that use it for serialization. Keeping diagnostic formatting separate would avoid changing that behavior.Additional context
This proposal focuses on debug output and registry error messages. It does not propose changing the serialized URL representation.