Tame logging of HTTPX to not reveal credentials

[amotl]

About

The httpx library emits sensitive information to the application log.

Recommendation

The recommendation is to alter the log level of HTTPX? Well, let's do it then, until swapping it for another library?

• Remove user credentials in URLs when converting to a string encode/httpx#3513 (comment)

References

• Obfuscate the details in connection string (at least the credential part) in the log out put #63

Summary by CodeRabbit

• Bug Fixes
  • Enhanced logging security by configuring the HTTPX logger to hide sensitive credentials and prevent their exposure in application logs.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

A changelog entry documents HTTPX logging security improvements. The CLI entrypoint now configures the HTTPX logger to WARNING level during initialization to prevent credential exposure in logs.

Changes

Cohort / File(s)	Change Summary
Changelog CHANGES.md	Added unreleased changelog entry documenting HTTPX logging credential protection.
CLI Logging Configuration cratedb_mcp/cli.py	Initialized HTTPX logger configuration in the CLI entrypoint to set logging level to WARNING and suppress sensitive credential details during CLI startup.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

• Changelog entry is purely documentation.
• Logger configuration addition is a straightforward, defensive initialization step with minimal logic density.

Poem

🐰 A whisper of wisdom in logs we keep,
HTTPX secrets buried deep,
No credentials for prying eyes,
Just warnings that sensibly rise. 🔐

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch httpx-credentials-logging

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between db1f07a and 177cd86.

📒 Files selected for processing (2)

• CHANGES.md (1 hunks)
• cratedb_mcp/cli.py (1 hunks)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[surister]

LGTM, shame that it wasn't fixed at the core