paivana

commit 270f57b100bb28ff2d995658d9cae425b84efb28
parent 828bb621a6930ccc6835bdc6019c5754a87ade86
Author: Christian Grothoff <christian@grothoff.org>
Date:   Thu,  6 Aug 2026 16:15:46 +0200

do not log cookie (credential) value

Diffstat:
M
src/backend/paivana-httpd_cookie.c
 | 
2
+-
M
src/backend/paivana-httpd_pay.c
 | 
6
++++--

2 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/src/backend/paivana-httpd_cookie.c b/src/backend/paivana-httpd_cookie.c
@@ -57,7 +57,7 @@ compute_cookie_hash (struct GNUNET_TIME_Timestamp cur_time,
 {
   struct GNUNET_TIME_AbsoluteNBO e;
 
-  GNUNET_log (GNUNET_ERROR_TYPE_INFO,
+  GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
               "Computing cookie for %s at %llu and client %s\n",
               website,
               (unsigned long long) cur_time.abs_time.abs_value_us,
diff --git a/src/backend/paivana-httpd_pay.c b/src/backend/paivana-httpd_pay.c
@@ -351,9 +351,11 @@ order_status_cb (struct PayRequest *ph,
                                              ph->website,
                                              ca_len,
                                              ca);
+      /* The cookie is the bearer credential proving payment; anyone
+         who can read the log could replay it from the same address. */
       GNUNET_log (GNUNET_ERROR_TYPE_INFO,
-                  "Client paid, setting cookie `%s'\n",
-                  cookie);
+                  "Client paid for `%s', setting access cookie\n",
+                  ph->website);
       GNUNET_free (ca);
       resp = MHD_create_response_from_buffer (0,
                                               NULL,