Request logger auth logging username password


Request logger feature is logging username and password as part of request url. Is that on purpose or a bug? Is there a way to not log that?

RequestLogger is a generic request logger, you can exclude which requests should be logged with SkipLogging or ExcludeRequestDtoTypes, e.g:

Plugins.Add(new RequestLogsFeature {
    SkipLogging => req => req.PathInfo.StartsWith("/auth"),
    ExcludeRequestDtoTypes = new [] { typeof(Authenticate) },