Don't display password in logs

diff --git a/server/lib/oauth-model.ts b/server/lib/oauth-model.ts
index 769ea126a1b15a40cc2971317ee31c9b18a41a35..9aa3ea52f4e70b6240a8402143a3d0b2144cb244 100644 (file)
--- a/server/lib/oauth-model.ts
+++ b/server/lib/oauth-model.ts
@@ -25,7 +25,7 @@ function getRefreshToken (refreshToken: string) {
 }
 
 function getUser (username: string, password: string) {
-  logger.debug('Getting User (username: ' + username + ', password: ' + password + ').')
+  logger.debug('Getting User (username: ' + username + ', password: ******).')
 
   return db.User.getByUsername(username).then(user => {
     if (!user) return null