APAR status
Closed as program error.
Error description
In APIGW the mechanism to mask the client secret value in Analytics data should be case-insensitive for header name For example, if the API is configured with: ClientSecret: type: apiKey in: header name: Api-Key x-key-type: client_secret When calling the API with request header "api-key", the client secret value won't be masked in the Analytics data.
Local fix
Problem summary
The mechanism to mask client secret in analytics data should be header name case-insensitive.
Problem conclusion
Fix is available in 10.0.1.9 and 10.5.0.1. For a list of the latest fix packs available, please see: https://www.ibm.com/support/pages/node/83105
Temporary fix
Comments
APAR Information
APAR number
IT41395
Reported component name
DATAPOWER
Reported component ID
DP1234567
Reported release
A0X
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2022-06-30
Closed date
2022-07-26
Last modified date
2022-09-08
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
DATAPOWER
Fixed component ID
DP1234567
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateways"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"A0X","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
08 September 2022