From edcd5c2a713ddc4aed1d09cec8d05c286be2c2ba Mon Sep 17 00:00:00 2001
From: Sigurd Meldgaard <sigurdm@google.com>
Date: Thu, 31 Aug 2023 15:52:25 +0200
Subject: [PATCH] Don't display detailed errors from credentials file (#4004)

---
 lib/src/oauth2.dart | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/lib/src/oauth2.dart b/lib/src/oauth2.dart
index d4d88c9f6..38497ac6b 100644
--- a/lib/src/oauth2.dart
+++ b/lib/src/oauth2.dart
@@ -184,7 +184,9 @@ Credentials? loadCredentials() {
 
     return credentials;
   } catch (e) {
-    log.error('Warning: could not load the saved OAuth2 credentials: $e\n'
+    // Don't print the error message itself here. I might be leaking data about
+    // credentials.
+    log.error('Warning: could not load the saved OAuth2 credentials.\n'
         'Obtaining new credentials...');
     return null; // null means re-authorize.
   }