From 0f310594b0aff302ac2f3803bd2ec76fbfef32ca Mon Sep 17 00:00:00 2001
From: Codescribe <codescribe@windscribe.com>
Date: Sat, 28 Mar 2026 20:37:09 -0400
Subject: [PATCH] Redact provision token in logs

---
 cmd/cli/cli.go | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/cmd/cli/cli.go b/cmd/cli/cli.go
index 7dbcbcf..8275e5c 100644
--- a/cmd/cli/cli.go
+++ b/cmd/cli/cli.go
@@ -1812,7 +1812,7 @@ func cdUIDFromProvToken() string {
 	// Process provision token if provided.
 	resolverConfig, err := controld.FetchResolverUID(loggerCtx, req, appVersion, cdDev)
 	if err != nil {
-		mainLog.Load().Fatal().Err(err).Msgf("Failed to fetch resolver uid with provision token: %s", cdOrg)
+		mainLog.Load().Fatal().Err(err).Msgf("Failed to fetch resolver uid with provision token: %s", redactToken(cdOrg))
 	}
 	return resolverConfig.UID
 }
@@ -2257,3 +2257,12 @@ func uninstallInvalidCdUID(p *prog, logger *ctrld.Logger, doStop bool) bool {
 	}
 	return false
 }
+
+// redactToken returns the first 4 characters of a token followed by ***,
+// or just *** if the token is 4 characters or shorter.
+func redactToken(s string) string {
+	if len(s) <= 4 {
+		return "***"
+	}
+	return s[:4] + "***"
+}