Redact password and token-related fields (#368)

Password and token-related fields are now annotated as redacted, which should prevent the field values from appearing in toString output.

Author: wwong

changelog/@unreleased/pr-368.v2.yml

@@ -0,0 +1,6 @@
+type: fix
+fix:
+  description: Password and token-related fields are now annotated as redacted, which
+    should prevent the field values from appearing in toString output.
+  links:
+  - https://github.com/palantir/conjure-java-runtime-api/pull/368

service-config/src/main/java/com/palantir/conjure/java/api/config/service/BasicCredentials.java

@@ -30,6 +30,7 @@ public abstract class BasicCredentials {
     @Value.Parameter
     public abstract String username();
 
+    @Value.Redacted
     @Value.Parameter
     public abstract String password();
 

service-config/src/main/java/com/palantir/conjure/java/api/config/service/PartialServiceConfiguration.java

@@ -23,6 +23,7 @@
 import com.palantir.tokens.auth.BearerToken;
 import java.util.List;
 import java.util.Optional;
+import org.immutables.value.Value;
 import org.immutables.value.Value.Immutable;
 
 @Immutable
@@ -33,6 +34,7 @@ public interface PartialServiceConfiguration {
 
     /** The API token to be used to interact with the service. */
     @JsonAlias("api-token")
+    @Value.Redacted
     Optional<BearerToken> apiToken();
 
     /** The SSL configuration needed to interact with the service. */

service-config/src/main/java/com/palantir/conjure/java/api/config/service/ServiceConfiguration.java

@@ -30,6 +30,7 @@
 @ImmutablesStyle
 public interface ServiceConfiguration {
 
+    @Value.Redacted
     Optional<BearerToken> apiToken();
 
     SslConfiguration security();

service-config/src/main/java/com/palantir/conjure/java/api/config/service/ServicesConfigBlock.java

@@ -24,6 +24,7 @@
 import com.palantir.tokens.auth.BearerToken;
 import java.util.Map;
 import java.util.Optional;
+import org.immutables.value.Value;
 import org.immutables.value.Value.Immutable;
 
 /**
@@ -44,6 +45,7 @@ public abstract class ServicesConfigBlock {
      */
     @JsonProperty("apiToken")
     @JsonAlias("api-token")
+    @Value.Redacted
     public abstract Optional<BearerToken> defaultApiToken();
 
     /**

ssl-config/src/main/java/com/palantir/conjure/java/api/config/ssl/SslConfiguration.java

@@ -51,6 +51,7 @@ public StoreType trustStoreType() {
     public abstract Optional<Path> keyStorePath();
 
     @JsonAlias("key-store-password")
+    @Value.Redacted
     public abstract Optional<String> keyStorePassword();
 
     @SuppressWarnings("checkstyle:designforextension")