[Wave 6 16/17] Redact secrets from coordinator and resolver logs

[karagozemin]

Stellar Wave #6 - Apply via the Stellar Wave Program on Drips. Use the Wave application flow. Maintainers review applicants on the Drips maintainer dashboard.
Wave window: 2026-06-23 09:00 UTC -> 2026-06-30 09:00 UTC.

Summary

Coordinator and resolver logs should never print raw secrets, preimages, private keys, bearer tokens, or full signed payloads. Add a small shared redaction helper and apply it to structured logs around order, quote, secret, and resolver paths.

Context

Relevant areas:

• coordinator logging and secret reveal routes
• resolver order handling logs
• relayer/resolver env/config error paths
• existing tests for coordinator and resolver behavior

Scope

• Add a shared redaction helper for log-safe objects and strings.
• Redact common sensitive keys such as secret, preimage, privateKey, token, authorization, signedXdr, and mnemonic.
• Preserve safe debugging context like order IDs, chain names, addresses, status, and failure codes.
• Apply the helper to coordinator/resolver log paths that include request bodies or config-derived data.
• Add focused tests for nested object redaction and safe field preservation.
• Document the redaction rules briefly in docs or README.

Acceptance criteria

• Logs never include raw preimages, tokens, private keys, or signed payloads in the covered paths.
• Safe identifiers remain visible for debugging.
• Tests cover nested objects, arrays, mixed safe/sensitive fields, and unknown casing such as Authorization/authorization.
• Existing coordinator/resolver tests still pass.
• PR links to this issue.

Notes

Keep this small. Do not introduce a logging framework migration.

Wave complexity (maintainer)

High - 200 points

[Silver36-ship-it]

@Silver36-ship-it has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I would love to work on this professionally, please assign it to me

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Silver36-ship-it to this issue.

[Deyanju23]

@Deyanju23 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I would like to work on this please.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Deyanju23 to this issue.

[innovativedesign-lab]

@innovativedesign-lab has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I've reviewed the issue thoroughly and can start working on it right away. Looking forward to contributing.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @innovativedesign-lab to this issue.

[AGWAM001]

@AGWAM001 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Please assign, I can work it out

ℹ️ Repo Maintainers: To accept this application, review their application or assign @AGWAM001 to this issue.

[gidadoabdullateef5]

@gidadoabdullateef5 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Please bless me this task, and thy lord will bless you more, Please once again

ℹ️ Repo Maintainers: To accept this application, review their application or assign @gidadoabdullateef5 to this issue.

[oraimoitel]

@oraimoitel has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I will be glad to work on this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @oraimoitel to this issue.

[nanaabdul1172]

@nanaabdul1172 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hello,

I'd like to work on this issue. I can implement a shared log-redaction helper, apply it across the coordinator and resolver logging paths, preserve useful debugging context while masking sensitive values, add comprehensive tests for nested and mixed payloads, and document the redaction rules to ensure secure, consistent logging.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @nanaabdul1172 to this issue.

[fredericklamar342-prog]

@fredericklamar342-prog has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Kindly assign

ℹ️ Repo Maintainers: To accept this application, review their application or assign @fredericklamar342-prog to this issue.

[Mayorlay]

@Mayorlay has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hello please This issue aligns well with my experience. I can work on it and submit a polished PR for review

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Mayorlay to this issue.

[somotochukwu-dev]

@somotochukwu-dev has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Good day maintainer
Please assign this issue to me,I would like to work on this issue.
Thanks.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @somotochukwu-dev to this issue.

[kingbitnation]

@kingbitnation has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hi! I'd like to work on this issue.

After reviewing the requirements, I believe it's a good match for my experience. I'll implement the requested functionality while following the project's existing architecture, coding conventions, and contribution guidelines. I'll ensure the solution is clean, well-tested, and covers all of the stated acceptance criteria, updating or adding tests where appropriate and documenting any relevant changes.

If I encounter any implementation details that need clarification, I'll communicate them early to avoid unnecessary rework.

Could this issue be assigned to me?

ℹ️ Repo Maintainers: To accept this application, review their application or assign @kingbitnation to this issue.

[drips-wave]

Congratulations, @fredericklamar342-prog! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 30, 2026.

🧑‍💻 @fredericklamar342-prog: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊