#[non_exhaustive]pub struct DiagnosticExposure {
pub plaintext_oauth_tokens: bool,
pub oauth_claim_values: bool,
pub tool_call_arguments: bool,
pub upstream_error_bodies: bool,
}Expand description
Which categories of sensitive material may be rendered in plaintext.
Every field defaults to false, meaning redacted. Enabling a field
causes secrets to appear in logs and Debug output for the entire
process; see the module docs for the full warning.
Fields (Non-exhaustive)§
This struct is marked as non-exhaustive
Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.plaintext_oauth_tokens: boolRender OAuth access tokens in plaintext instead of [REDACTED].
Affects the Debug implementation of
ExchangedToken.
oauth_claim_values: boolRender JWT claim values (sub, aud, azp, iss) in plaintext.
These are identity, tenant, and deployment-topology identifiers and may be personally identifying.
tool_call_arguments: boolRender tool-call arguments and identity fields in plaintext.
Affects the Debug implementation of
ToolCallContext. Tool
arguments routinely carry credentials supplied by the caller.
upstream_error_bodies: boolRender the error_description returned by an authorization server on a
failed RFC 8693 token exchange.
The value is free-form text chosen by the upstream server and may reflect request parameters back, so it is redacted by default. Enable only while debugging an exchange failure.
Trait Implementations§
Source§impl Clone for DiagnosticExposure
impl Clone for DiagnosticExposure
Source§fn clone(&self) -> DiagnosticExposure
fn clone(&self) -> DiagnosticExposure
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more