Skip to content

Remove log_refresh_token_hash feature flag

What does this MR do and why?

Remove the log_refresh_token_hash feature flag.

The flag has been globally enabled in production for ~5 days. The /oauth/tokens endpoint is very busy and there have been no problems. The new attribute is being logged as intended in production logs.

References

How to set up and validate locally

The validation instructions from the original MR still work. refresh_token_hash is still visible in logs when this branch is checked out.

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #573454 (closed)

Merge request reports

Loading